Lucene search

K
cvelistLarry_cashdollarCVELIST:CVE-2017-1002018
HistoryOct 03, 2022 - 4:22 p.m.

CVE-2017-1002018

2022-10-0316:22:52
larry_cashdollar
www.cve.org
wordpress
plugin vulnerability
sql injection

9.9 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

54.0%

Vulnerability in wordpress plugin eventr v1.02.2, The edit.php form and attendees.php code do not sanitize input, this allows for blind SQL injection via the event parameter.

CNA Affected

[
  {
    "product": "eventr",
    "vendor": "Binny V A",
    "versions": [
      {
        "lessThan": "1.02.2",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

9.9 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

54.0%

Related for CVELIST:CVE-2017-1002018