Description (CNA)
The GiveWP WordPress plugin before 2.24.1 does not properly escape user input before it reaches SQL queries, which could let unauthenticated attackers perform SQL Injection attacks
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Unknown / GiveWP | affected 0 before 2.24.1 |
CWE
No CWE identifiers supplied.
References
- https://wpscan.com/vulnerability/d8da539d-0a1b-46ef-b48d-710c59cf68e1/
- https://givewp.com/core-2-24-0-vulnerability-patched/
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.