5.4
Moyenne
CVE-2024-9838 The Auto Affiliate Links WordPress plugin before 6.4.7 does not sanitize and escape a parameter before using it in a SQL…
Description
The Auto Affiliate Links WordPress plugin before 6.4.7 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injection attacks
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Auto Affiliate Links 6.4 | premières → < 6.4.7 | 6.4.7 |