Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-qrhc-83j2-vphf

Опубликовано: 08 мая 2023
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

The Bitcoin / AltCoin Payment Gateway for WooCommerce & Multivendor store / shop WordPress plugin through 1.7.1 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by authenticated users

The Bitcoin / AltCoin Payment Gateway for WooCommerce & Multivendor store / shop WordPress plugin through 1.7.1 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by authenticated users

EPSS

Процентиль: 67%
0.00538
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-89

Связанные уязвимости

CVSS3: 9.8
nvd
почти 3 года назад

The Bitcoin / AltCoin Payment Gateway for WooCommerce & Multivendor store / shop WordPress plugin through 1.7.1 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by authenticated users

EPSS

Процентиль: 67%
0.00538
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-89