Security Advisory

CVE-2023-36508

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2023-10-31 14:23:21
Last updated 2026-04-28 16:08:30
Assigner Patchstack
State PUBLISHED

Description

Improper Neutralization of Special Elements used in an SQL Command (SQL Injection) vulnerability in BestWebSoft Contact Form to DB by BestWebSoft – Messages Database Plugin For WordPress contact-form-to-db allows SQL Injection.This issue affects Contact Form to DB by BestWebSoft – Messages Database Plugin For WordPress: from n/a through 1.7.1.