← CVE Intelligence

CVE-2023-4797

Newsletter Lite < 4.9.3 - Admin+ Command Injection PUBLISHED

Description (CNA)

The Newsletters WordPress plugin before 4.9.3 does not properly escape user-controlled parameters when they are appended to SQL queries and shell commands, which could enable an administrator to run arbitrary commands on the server.

Affected (CNA)

Vendor / productVersions
Unknown / Newslettersaffected 0 before 4.9.3

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.