exploitDog

CVE-2023-28662

Опубликовано: 22 мар. 2023

Источник: nvd

CVSS3: 9.8

EPSS Средний

Описание

The Gift Cards (Gift Vouchers and Packages) WordPress Plugin, version <= 4.3.1, is affected by an unauthenticated SQL injection vulnerability in the template parameter in the wpgv_doajax_voucher_pdf_save_func action.

Ссылки

https://www.tenable.com/security/research/tra-2023-2
Exploit
Third Party Advisory
https://www.tenable.com/security/research/tra-2023-2
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:codemenschen:gift_vouchers:*:*:*:*:*:wordpress:*:*

Версия до 4.3.1 (включая)

EPSS

Процентиль: 99%

0.68419

Средний

9.8 Critical

CVSS3

Дефекты

CWE-89

CWE-89

Связанные уязвимости

GHSA-9c49-3qrv-gxfp

CVSS3: 9.8

github

почти 3 года назад

The Gift Cards (Gift Vouchers and Packages) WordPress Plugin, version <= 4.3.1, is affected by an unauthenticated SQL injection vulnerability in the template parameter in the wpgv_doajax_voucher_pdf_save_func action.

EPSS

Процентиль: 99%

0.68419

Средний

9.8 Critical

CVSS3

Дефекты

CWE-89

CWE-89