Описание
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in BestWebSoft Contact Form to DB by BestWebSoft.This issue affects Contact Form to DB by BestWebSoft: from n/a through 1.7.2.
Ссылки
- Third Party Advisory
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 1.7.3 (исключая)
cpe:2.3:a:bestwebsoft:contact_form_to_db:*:*:*:*:*:wordpress:*:*
EPSS
Процентиль: 52%
0.00296
Низкий
8.5 High
CVSS3
8.8 High
CVSS3
Дефекты
CWE-89
Связанные уязвимости
CVSS3: 8.5
github
около 1 года назад
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in BestWebSoft Contact Form to DB by BestWebSoft.This issue affects Contact Form to DB by BestWebSoft: from n/a through 1.7.2.
EPSS
Процентиль: 52%
0.00296
Низкий
8.5 High
CVSS3
8.8 High
CVSS3
Дефекты
CWE-89