Lucene search

[email protected]NVD:CVE-2024-21747

HistoryJan 08, 2024 - 5:15 p.m.

CVE-2024-21747

2024-01-0817:15:08

CWE-89

[email protected]

web.nvd.nist.gov

cve-2024-21747

sql injection

wedevs wp erp

wp erp

hr solution

recruitment

job listings

woocommerce crm

accounting

CVSS3

4.9

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

EPSS

0.001

Percentile

18.1%

JSON

Improper Neutralization of Special Elements used in an SQL Command (‘SQL Injection’) vulnerability in weDevs WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting.This issue affects WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting: from n/a through 1.12.8.

Affected configurations

Nvd

Node

wedevswp_erpRange<1.12.9wordpress

VendorProductVersionCPE
wedevswp_erp*cpe:2.3:a:wedevs:wp_erp:*:*:*:*:*:wordpress:*:*

Vendor	Product	Version	CPE
wedevs	wp_erp	*	cpe:2.3:a:wedevs:wp_erp::::::wordpress::*

References

patchstack.com/database/vulnerability/erp/wordpress-wp-erp-plugin-1-12-8-sql-injection-vulnerability?_s_id=cve

CVSS3

4.9

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

EPSS

0.001

Percentile

18.1%

JSON

Related for NVD:CVE-2024-21747

wpvulndb1 cve1 prion1 cvelist1 wordfence1