Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-99gh-cvp7-vwp4

Опубликовано: 18 мар. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

The Fancy Product Designer WordPress plugin before 6.1.5 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by adminstrators.

The Fancy Product Designer WordPress plugin before 6.1.5 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by adminstrators.

EPSS

Процентиль: 54%
0.00315
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-89

Связанные уязвимости

CVSS3: 6.5
nvd
почти 2 года назад

The Fancy Product Designer WordPress plugin before 6.1.5 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by adminstrators.

EPSS

Процентиль: 54%
0.00315
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-89