CVE-2017-20289 | Broadstreet Ad Widget Plugin up to 2.11.x Modal View views/modal/index.php require step file inclusion

October 22, 2026 Yanac

A vulnerability classified as critical was found in Broadstreet Ad Widget Plugin up to 2.11.x. Affected by this issue is the function require of the file views/modal/index.php of the component Modal View. The manipulation of the argument step results in file inclusion.

This vulnerability is known as CVE-2017-20289. It is possible to launch the attack remotely. No exploit is available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More