Lucene search

K
cve[email protected]CVE-2023-28777
HistoryOct 31, 2023 - 2:15 p.m.

CVE-2023-28777

2023-10-3114:15:11
CWE-89
web.nvd.nist.gov
36
cve
learndash lms
sql injection
security vulnerability
nvd

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

9 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

19.3%

Improper Neutralization of Special Elements used in an SQL Command (β€˜SQL Injection’) vulnerability in LearnDash LearnDash LMS allows SQL Injection.This issue affects LearnDash LMS: from n/a through 4.5.3.

Affected configurations

Vulners
NVD
Node
learndashlearndashRange≀4.5.3
VendorProductVersionCPE
learndashlearndash*cpe:2.3:a:learndash:learndash:*:*:*:*:*:*:*:*

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "LearnDash LMS",
    "vendor": "LearnDash",
    "versions": [
      {
        "changes": [
          {
            "at": "4.5.3.1",
            "status": "unaffected"
          }
        ],
        "lessThanOrEqual": "4.5.3",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

9 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

19.3%

Related for CVE-2023-28777