9.9
Critical
CVE-2023-36529 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Favethemes…
Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Favethemes Houzez - Real Estate WordPress Theme allows SQL Injection.This issue affects Houzez - Real Estate WordPress Theme: from n/a through 1.3.4.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Houzez - Real Estate WordPress Theme 1.3 | earliest → 1.3.4 | No fix stated |
| Houzez CRM 1.3 | earliest → 1.3.4 | No fix stated |