9.3
Critical
CVE-2024-47331 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ninja Team Multi…
Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ninja Team Multi Step for Contact Form cf7-multi-step allows SQL Injection.This issue affects Multi Step for Contact Form: from n/a through <= 2.7.7.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Multi Step for Contact Form 2.7 | earliest → 2.7.7 | No fix stated |
| multi_step_for_contact_form 2.7 | earliest → 2.7.7 | No fix stated |
| Multi Step for Contact Form 2.7 | earliest → 2.7.7 | No fix stated |