Lucene search
HistoryDec 20, 2023 - 3:15 p.m.
CVE-2023-47852
cve-2023-47852
improper neutralization
sql command
sql injection
link whisper free
CVSS3
7.2
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
19.3%
Improper Neutralization of Special Elements used in an SQL Command (‘SQL Injection’) vulnerability in Link Whisper Link Whisper Free.This issue affects Link Whisper Free: from n/a through 0.6.5.
Affected configurations
Node
linkwhisperlink_whisper_freeRange<0.6.6wordpress
| Vendor | Product | Version | CPE |
|---|---|---|---|
| linkwhisper | link_whisper_free | * | cpe:2.3:a:linkwhisper:link_whisper_free:*:*:*:*:*:wordpress:*:* |
Related
wpvulndb
wpvulndb
Link Whisper Free < 0.6.6 - Authenticated (Contributor+) SQL Injection
2023-11-29 00:00:00
cve
cve
CVE-2023-47852
2023-12-20 15:15:09
cvelist
cvelist
prion
prion
Sql injection
2023-12-20 15:15:00
wordfence
wordfence
CVSS3
7.2
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
19.3%
Related for NVD:CVE-2023-47852