7.6
High
CVE-2023-40207 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in RedNao Donations…
Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in RedNao Donations Made Easy – Smart Donations allows SQL Injection.This issue affects Donations Made Easy – Smart Donations: from n/a through 4.0.12.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Donations Made Easy – Smart Donations 4.0 | earliest → 4.0.12 | No fix stated |
Other CVEs of Donations Made Easy – Smart Donations
The 6 CVEs of Donations Made Easy – Smart Donations →
CVE-2023-38475
Missing Authorization vulnerability in RedNao Donations Made Easy – Smart Donations allows Exploiting Incorrectly…
4.3
Medium
CVE-2023-47551
Cross-Site Request Forgery (CSRF) vulnerability in RedNao Donations Made Easy – Smart Donations.This issue affects…
5.4
Medium
CVE-2023-47550
Cross-Site Request Forgery (CSRF) vulnerability in RedNao Donations Made Easy – Smart Donations allows Stored XSS.This…
7.1
High
CVE-2023-40664
Unauth
7.1
High