CVE-2023-0579 in YARPP Plugin
요약
\~에 의해 MITRE • 2023. 08. 16.
The YARPP WordPress plugin before 5.30.3 does not validate and escape some of its shortcode attributes before using them in SQL statement/s, which could allow any authenticated users, such as subscribers to perform SQL Injection attacks.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.