Описание
The Super Store Finder WordPress plugin before 7.11 does not sanitize a parameter of an unauthenticated AJAX action before using it in a SQL query, allowing unauthenticated attackers to perform SQL injection and extract data from the database.
EPSS
Процентиль: 28%
0.00348
Низкий
9.1 Critical
CVSS3
Дефекты
CWE-89
Связанные уязвимости
CVSS3: 9.1
github
около 2 месяцев назад
The Super Store Finder WordPress plugin through 7.8 does not sanitize a parameter of an unauthenticated AJAX action before using it in a SQL query, allowing unauthenticated attackers to perform SQL injection and extract data from the database.
EPSS
Процентиль: 28%
0.00348
Низкий
9.1 Critical
CVSS3
Дефекты
CWE-89