Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-xc74-475v-6rmv

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

The Edit domain functionality in the WP Domain Redirect WordPress plugin through 1.0 has an editid parameter which is not sanitised, escaped or validated before inserting to a SQL statement, leading to SQL injection.

The Edit domain functionality in the WP Domain Redirect WordPress plugin through 1.0 has an editid parameter which is not sanitised, escaped or validated before inserting to a SQL statement, leading to SQL injection.

EPSS

Процентиль: 70%
0.0062
Низкий

Дефекты

CWE-89

Связанные уязвимости

CVSS3: 7.2
nvd
больше 4 лет назад

The Edit domain functionality in the WP Domain Redirect WordPress plugin through 1.0 has an `editid` parameter which is not sanitised, escaped or validated before inserting to a SQL statement, leading to SQL injection.

EPSS

Процентиль: 70%
0.0062
Низкий

Дефекты

CWE-89