Security Advisory

CVE-2019-20361

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2020-01-08 05:03:21
Last updated 2024-08-05 02:39:09
Assigner mitre
State PUBLISHED

Description

There was a flaw in the WordPress plugin, Email Subscribers & Newsletters before 4.3.1, that allowed SQL statements to be passed to the database in the hash parameter (a blind SQL injection vulnerability).