Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-c797-jx9v-f674

Опубликовано: 06 янв. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

The Email Subscribers by Icegram Express WordPress plugin before 5.7.44 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injection attacks

The Email Subscribers by Icegram Express WordPress plugin before 5.7.44 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injection attacks

EPSS

Процентиль: 21%
0.00068
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-89

Связанные уязвимости

CVSS3: 6.5
nvd
около 1 года назад

The Email Subscribers by Icegram Express WordPress plugin before 5.7.44 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injection attacks

EPSS

Процентиль: 21%
0.00068
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-89