CVE-2023-1730 in SupportCandy Plugin

Riassunto

di MITRE • 02/05/2023

The SupportCandy WordPress plugin before 3.1.5 does not validate and escape user input before using it in an SQL statement, which could allow unauthenticated attackers to perform SQL injection attacks

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Prenotare: 30/03/2023
• Divulgazione: 02/05/2023
• Moderazione: accettato
• Voce: VDB-225857
• CPE: pronto
• CWE: CWE-89 (confermato)
• CVSS: 9.8 (NVD)
• EPSS: 0.40586
• KEV: no
• Attività: molto basso
• Settore: Hostingprovider

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2023-1730
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2023-1730
• CVE Details: https://www.cvedetails.com/cve/CVE-2023-1730/