← CVE Intelligence

CVE-2023-5041

Track The Click < 0.3.12 - Author+ Time-Based Blind SQL Injection PUBLISHED

Description (CNA)

The Track The Click WordPress plugin before 0.3.12 does not properly sanitize query parameters to the stats REST endpoint before using them in a database query, allowing a logged in user with an author role or higher to perform time based blind SQLi attacks on the database.

Affected (CNA)

Vendor / productVersions
Unknown / Track The Clickaffected 0 before 0.3.12

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.