Описание
The Participants Database WordPress plugin before 2.7.8.4 does not properly sanitize and escape a user-supplied parameter before using it in a SQL query, allowing unauthenticated attackers to perform SQL injection attacks.
EPSS
Процентиль: 18%
0.00262
Низкий
9.1 Critical
CVSS3
Дефекты
CWE-89
Связанные уязвимости
CVSS3: 9.1
github
6 дней назад
The Participants Database WordPress plugin before 2.7.8.4 does not properly sanitize and escape a user-supplied parameter before using it in a SQL query, allowing unauthenticated attackers to perform SQL injection attacks.
EPSS
Процентиль: 18%
0.00262
Низкий
9.1 Critical
CVSS3
Дефекты
CWE-89