6.5
Moyenne
CVE-2024-12311 The Email Subscribers by Icegram Express WordPress plugin before 5.7.44 does not sanitize and escape a parameter before…
Description
The Email Subscribers by Icegram Express WordPress plugin before 5.7.44 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injection attacks
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Email Subscribers by Icegram Express 5.7 | premières → < 5.7.44 | 5.7.44 |
Autres CVE de Email Subscribers by Icegram Express
Les 5 CVE de Email Subscribers by Icegram Express →
CVE-2024-12567
The Email Subscribers by Icegram Express WordPress plugin before 5.7.45 does not sanitise and escape some of its form…
4.8
Moyenne
CVE-2024-12568
The Email Subscribers by Icegram Express WordPress plugin before 5.7.45 does not sanitise and escape some of its…
4.8
Moyenne
CVE-2024-12566
The Email Subscribers by Icegram Express WordPress plugin before 5.7.45 does not sanitise and escape some of form…
4.8
Moyenne
CVE-2024-11636
The Email Subscribers by Icegram Express WordPress plugin before 5.7.45 does not sanitise and escape some of its Text…
4.8
Moyenne