Aller au contenu
Se connecter
4.1 Moyenne

CVE-2024-9828 The Taskbuilder WordPress plugin before 3.0.5 does not sanitize user input into the 'load_orders' parameter and uses it…

Description

The Taskbuilder WordPress plugin before 3.0.5 does not sanitize user input into the 'load_orders' parameter and uses it in a SQL statement, allowing high privilege users such as admin to perform SQL Injection attacks

Produits et versions touchés

Produit Versions touchées Corrigé en
Taskbuilder 3.0 premières → < 3.0.5 3.0.5
Taskbuilder 3.0 premières → < 3.0.5 3.0.5

Autres CVE de Taskbuilder

Les 3 CVE de Taskbuilder →
CVE-2026-9570 The Taskbuilder WordPress plugin before 5.0.8 does not properly sanitise a URL parameter before echoing it into… 7.1 Élevée CVE-2024-9831 The Taskbuilder WordPress plugin before 3.0.9 does not sanitize and escape a parameter before using it in a SQL… 7.2 Élevée
Suivre cette CVE