Описание
The Fluent Support WordPress plugin before 1.5.8 does not properly sanitise, validate and escape various parameters before using them in an SQL statement, leading to an SQL Injection vulnerability exploitable by high privilege users
Ссылки
- ExploitThird Party Advisory
- ExploitThird Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 1.5.8 (исключая)
cpe:2.3:a:wpmanageninja:fluent_support:*:*:*:*:*:wordpress:*:*
EPSS
Процентиль: 67%
0.00537
Низкий
7.2 High
CVSS3
Дефекты
CWE-89
Связанные уязвимости
CVSS3: 7.2
github
больше 3 лет назад
The Fluent Support WordPress plugin before 1.5.8 does not properly sanitise, validate and escape various parameters before using them in an SQL statement, leading to an SQL Injection vulnerability exploitable by high privilege users
EPSS
Процентиль: 67%
0.00537
Низкий
7.2 High
CVSS3
Дефекты
CWE-89