5.9
Moyenne
CVE-2024-9796 The WP-Advanced-Search WordPress plugin before 3.3.9.2 does not sanitize and escape the t parameter before using it in a…
Description
The WP-Advanced-Search WordPress plugin before 3.3.9.2 does not sanitize and escape the t parameter before using it in a SQL statement, allowing unauthenticated users to perform SQL injection attacks
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| WP-Advanced-Search 3.3 | premières → < 3.3.9.2 | 3.3.9.2 |
| wp-advanced-search 3.3 | premières → < 3.3.9.2 | 3.3.9.2 |