← CVE Intelligence

CVE-2020-8242

n/a / ExpressionEngine PUBLISHED

Description (CNA)

Unsanitized user input in ExpressionEngine <= 5.4.0 control panel member creation leads to an SQL injection. The user needs member creation/admin control panel access to execute the attack.

Affected (CNA)

Vendor / productVersions
n/a / ExpressionEngineaffected <= 5.4.0

CWE

CWE-89

References

ADP enrichment

CVE

No English description supplied.