7.6
High
CVE-2023-36508 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in BestWebSoft…
Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in BestWebSoft Contact Form to DB by BestWebSoft – Messages Database Plugin For WordPress contact-form-to-db allows SQL Injection.This issue affects Contact Form to DB by BestWebSoft – Messages Database Plugin For WordPress: from n/a through 1.7.1.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Contact Form to DB by BestWebSoft – Messages Database Plugin For WordPress 1.7 | earliest → 1.7.1 | No fix stated |
| Contact Form to DB by BestWebSoft 1.7 | earliest → 1.7.1 | No fix stated |