PT-2023-19801 · WordPress · Responsive Css Editor

·

CVE-2023-2482

·

Published

2023-06-27

·

Updated

2023-07-03

CVSS v3.1

7.2

High

VectorAV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Responsive CSS EDITOR WordPress plugin version 1.0
Description The issue arises from improper sanitization and escaping of a parameter before its use in a SQL statement, leading to a SQL injection. This can be exploited by high-privilege users, such as administrators.
Recommendations For Responsive CSS EDITOR WordPress plugin version 1.0, consider updating to a newer version that properly sanitizes and escapes parameters used in SQL statements to prevent SQL injection. As a temporary workaround, restrict administrative access to trusted users only to minimize the risk of exploitation.

Exploit

Fix

SQL injection

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2023-2482

Affected Products

Responsive Css Editor