exploitDog

CVE-2023-50857

Опубликовано: 28 дек. 2023

Источник: nvd

CVSS3: 7.6

CVSS3: 7.2

EPSS Низкий

Описание

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in FunnelKit Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit.This issue affects Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit: from n/a through 2.6.1.

Ссылки

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:funnelkit:funnelkit_automations:*:*:*:*:*:wordpress:*:*

Версия до 2.6.1 (включая)

EPSS

Процентиль: 35%

0.00139

Низкий

7.6 High

CVSS3

7.2 High

CVSS3

Дефекты

CWE-89

CWE-89

Связанные уязвимости

GHSA-4m45-v7m2-3276

CVSS3: 7.6

github

около 2 лет назад

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in FunnelKit Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit.This issue affects Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit: from n/a through 2.6.1.

EPSS

Процентиль: 35%

0.00139

Низкий

7.6 High

CVSS3

7.2 High

CVSS3

Дефекты

CWE-89

CWE-89