exploitDog

CVE-2024-47334

Опубликовано: 09 окт. 2024

Источник: nvd

CVSS3: 7.6

EPSS Низкий

Описание

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Zoho Flow Zoho Flow for WordPress allows SQL Injection.This issue affects Zoho Flow for WordPress: from n/a through 2.7.1.

Ссылки

https://patchstack.com/database/vulnerability/zoho-flow/wordpress-zoho-flow-plugin-2-7-1-sql-injection-vulnerability?_s_id=cve

EPSS

Процентиль: 45%

0.00225

Низкий

7.6 High

CVSS3

Дефекты

CWE-89

Связанные уязвимости

GHSA-q9h7-27gp-hwp9

CVSS3: 7.6

github

больше 1 года назад

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Zoho Flow Zoho Flow for WordPress allows SQL Injection.This issue affects Zoho Flow for WordPress: from n/a through 2.7.1.

EPSS

Процентиль: 45%

0.00225

Низкий

7.6 High

CVSS3

Дефекты

CWE-89