Aller au contenu
Se connecter
8.8 Élevée

CVE-2023-2921 The Short URL WordPress plugin through 1.6.8 does not properly sanitise and escape a parameter before using it in SQL…

Description

The Short URL WordPress plugin through 1.6.8 does not properly sanitise and escape a parameter before using it in SQL statement, leading to a SQL injection exploitable by users with relatively low privilege on the site, like subscribers.

Produits et versions touchés

Produit Versions touchées Corrigé en
Short URL 1.6 premières → 1.6.8 Pas de correctif indiqué

Autres CVE de Short URL

Les 2 CVE de Short URL →
CVE-2023-3130 The Short URL WordPress plugin before 1.6.5 does not sanitise and escape some of its settings, which could allow high… Non notée
Suivre cette CVE