Sql injection

2014-08-0619:55:00

PRIOn knowledge base

www.prio-n.com

8.6 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

44.1%

JSON

SQL injection vulnerability in the Quartz plugin 1.01.1 for WordPress allows remote authenticated users with Contributor privileges to execute arbitrary SQL commands via the quote parameter in an edit action in the quartz/quote_form.php page to wp-admin/edit.php.

CPENameOperatorVersion
quartz_plugineq1.01.1

CPE	Name	Operator	Version
	quartz_plugin	eq	1.01.1

References

codevigilant.com/disclosure/wp-plugin-quartz-a1-injection