CVE-2017-1002027

2017-09-1413:00:00

larry_cashdollar

www.cve.org

AI Score

9.7

Confidence

High

EPSS

0.005

Percentile

75.4%

JSON

Vulnerability in wordpress plugin rk-responsive-contact-form v1.0, The variable $delid isn’t sanitized before being passed into an SQL query in file ./rk-responsive-contact-form/include/rk_user_list.php.

CNA Affected

[
  {
    "product": " rk-responsive-contact-form",
    "vendor": "rkdevelopers",
    "versions": [
      {
        "lessThan": "1.0",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]