Lucene search
HistoryMar 18, 2024 - 7:15 p.m.
CVE-2024-0365
sql injection
fancy product designer
wordpress plugin
cve-2024-0365
administrators
security vulnerability
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
AI Score
7.1
Confidence
High
EPSS
0
Percentile
9.0%
The Fancy Product Designer WordPress plugin before 6.1.5 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by adminstrators.
Related
cvelist
cvelist
CVE-2024-0365 Fancy Product Designer < 6.1.5 - Admin+ SQL Injection
2024-03-18 19:05:42
cve
cve
CVE-2024-0365
2024-03-18 19:15:06
wpvulndb
wpvulndb
Fancy Product Designer < 6.1.5 - Admin+ SQL Injection
2024-02-20 00:00:00
wpexploit
wpexploit
Fancy Product Designer < 6.1.5 - Admin+ SQL Injection
2024-02-20 00:00:00
vulnrichment
vulnrichment
CVE-2024-0365 Fancy Product Designer < 6.1.5 - Admin+ SQL Injection
2024-03-18 19:05:42
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
AI Score
7.1
Confidence
High
EPSS
0
Percentile
9.0%
Related for NVD:CVE-2024-0365