Beveiligingsadvies

CVE-2024-9186

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-11-14 06:00:11

Laatst bijgewerkt 2024-11-15 19:27:37

Toegewezen door WPScan

CVSS-score 8.6

Status PUBLISHED

Beschrijving

The Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit WordPress plugin before 3.3.0 does not sanitize and escape the bwfan-track-id parameter before using it in a SQL statement, allowing unauthenticated users to perform SQL injection attacks

← Alle CVE's bekijken Bekijk op cve.org ↗