CVE-2020-25990

2020-10-0113:57:54

mitre

www.cve.org

9.9 High

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

76.5%

JSON

WebsiteBaker 2.12.2 allows SQL Injection via parameter ‘display_name’ in /websitebaker/admin/preferences/save.php. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.