Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-qpxf-h287-r5r8

Опубликовано: 23 авг. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.2

Описание

The Transposh WordPress Translation WordPress plugin through 1.0.8 does not sanitise and escape the order and orderby parameters before using them in a SQL statement, leading to a SQL injection

The Transposh WordPress Translation WordPress plugin through 1.0.8 does not sanitise and escape the order and orderby parameters before using them in a SQL statement, leading to a SQL injection

EPSS

Процентиль: 72%
0.00728
Низкий

7.2 High

CVSS3

Дефекты

CWE-89

Связанные уязвимости

CVSS3: 7.2
nvd
больше 3 лет назад

The Transposh WordPress Translation WordPress plugin through 1.0.8 does not sanitise and escape the order and orderby parameters before using them in a SQL statement, leading to a SQL injection

EPSS

Процентиль: 72%
0.00728
Низкий

7.2 High

CVSS3

Дефекты

CWE-89