Non notée
CVE-2023-0579 The YARPP WordPress plugin before 5.30.3 does not validate and escape some of its shortcode attributes before using them…
Description
The YARPP WordPress plugin before 5.30.3 does not validate and escape some of its shortcode attributes before using them in SQL statement/s, which could allow any authenticated users, such as subscribers to perform SQL Injection attacks.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| YARPP 5.30 | premières → < 5.30.3 | 5.30.3 |