CVE-2026-89287 — ASPL Product Quotation <= 1.1.0 - Unauthenticated SQLi via 'quote_id' Parameter

CVE-2026-89287

ASPL Product Quotation <= 1.1.0 - Unauthenticated SQLi via 'quote_id' Parameter PUBLISHED

Description (CNA)

The ASPL Product Quotation WordPress plugin through 1.1.0 does not sanitize and escape a parameter before using it in SQL statements, allowing unauthenticated attackers to perform SQL injection and read arbitrary data from the database.

Affected (CNA)

Vendor / product	Versions
Unknown / ASPL Product Quotation	affected 0 through 1.1.0

CWE

No CWE identifiers supplied.

References

https://wpscan.com/vulnerability/9194818b-75c8-40f0-baba-6dc84d2cfe7d/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.