CVE-2023-32590

2023-12-2015:15:08

CWE-89

[email protected]

web.nvd.nist.gov

cve-2023-32590

daniel söderström

sidney van de stouwe

sql injection

subscribe to category

n/a

2.7.4

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.001

Percentile

31.7%

JSON

Improper Neutralization of Special Elements used in an SQL Command (‘SQL Injection’) vulnerability in Daniel Söderström / Sidney van de Stouwe Subscribe to Category.This issue affects Subscribe to Category: from n/a through 2.7.4.

Affected configurations

Nvd

Node

subscribe_to_category_projectsubscribe_to_categoryRange≤2.7.4wordpress

VendorProductVersionCPE
subscribe_to_category_projectsubscribe_to_category*cpe:2.3:a:subscribe_to_category_project:subscribe_to_category:*:*:*:*:*:wordpress:*:*