← CVE Intelligence

CVE-2023-0098

Simple URLs < 115 - Subscriber+ SQLi PUBLISHED

Description (CNA)

The Simple URLs WordPress plugin before 115 does not escape some parameters before using them in various SQL statements used by AJAX actions available by any authenticated users, leading to a SQL injection exploitable by low privilege users such as subscriber.

Affected (CNA)

Vendor / productVersions
Unknown / Simple URLsaffected 0 before 115

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.