CVE-2021-44097

Name of the Vulnerable Software and Affected Versions EGavilan Media Contact-Form-With-Messages-Entry-Management version 1.0

Description The issue allows a remote attacker to compromise the application's SQL database via SQL Injection in the Addmessage.php file. This can be exploited by sending malicious input to the Addmessage.php endpoint, potentially allowing access to sensitive data.

Recommendations For EGavilan Media Contact-Form-With-Messages-Entry-Management version 1.0, consider disabling the Addmessage.php file or restricting access to it until a patch is available to prevent SQL Injection attacks.