Beveiligingsadvies

CVE-2023-2111

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2023-05-30 07:49:22

Laatst bijgewerkt 2025-01-10 16:13:26

Toegewezen door WPScan

CVSS-score 4.9

Status PUBLISHED

Beschrijving

The Fast & Effective Popups & Lead-Generation for WordPress plugin before 2.1.4 concatenates user input into an SQL query without escaping it first in the plugin's report API endpoint, which could allow administrators in multi-site configuration to leak sensitive information from the site's database.

← Alle CVE's bekijken Bekijk op cve.org ↗