PT-2023-25376 · WordPress · Contact Form Generator

Emili Castells

·

CVE-2023-35911

·

Publicado

2023-11-06

·

Atualizado

2023-11-10

CVSS v3.1

9.8

Crítica

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Contact Form Generator : Creative form builder for WordPress versions prior to 2.6.0
Description The issue is related to an SQL Injection vulnerability due to the improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks.
Recommendations For versions prior to 2.6.0, update to version 2.6.0 or later to resolve the issue.

Correção

SQL injection

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2023-35911

Produtos afetados

Contact Form Generator