8.5
High
CVE-2024-35678 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in BestWebSoft…
Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in BestWebSoft Contact Form to DB by BestWebSoft.This issue affects Contact Form to DB by BestWebSoft: from n/a through 1.7.2.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Contact Form to DB by BestWebSoft 1.7 | earliest → 1.7.2 | No fix stated |
| contact_form_to_db 1.7 | earliest → 1.7.2 | No fix stated |