Описание
The Visual Slide Box Builder WordPress plugin through 3.2.9 does not sanitise and escape various parameters before using them in SQL statements via some of its AJAX actions available to any authenticated users (such as subscriber), leading to SQL Injections
Ссылки
- ExploitThird Party Advisory
- ExploitThird Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 3.2.9 (включая)
cpe:2.3:a:visual_slide_box_builder_project:visual_slide_box_builder:*:*:*:*:*:wordpress:*:*
EPSS
Процентиль: 72%
0.00703
Низкий
8.8 High
CVSS3
6.5 Medium
CVSS2
Дефекты
CWE-89
Связанные уязвимости
CVSS3: 8.8
github
больше 3 лет назад
The Visual Slide Box Builder WordPress plugin through 3.2.9 does not sanitise and escape various parameters before using them in SQL statements via some of its AJAX actions available to any authenticated users (such as subscriber), leading to SQL Injections
EPSS
Процентиль: 72%
0.00703
Низкий
8.8 High
CVSS3
6.5 Medium
CVSS2
Дефекты
CWE-89