Skip to content
Sign in
9.1 Critical

CVE-2024-5975 The CZ Loan Management WordPress plugin through 1.1 does not properly sanitise and escape a parameter before using it in…

Description

The CZ Loan Management WordPress plugin through 1.1 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection

Affected products and versions

Product Affected versions Fixed in
CZ Loan Management 1.1 earliest → 1.1 No fix stated
cz_loan_management 1.1 earliest → 1.1 No fix stated
Track this CVE