Lucene search

K
prionPRIOn knowledge basePRION:CVE-2020-12104
HistoryMay 05, 2020 - 3:15 p.m.

Sql injection

2020-05-0515:15:00
PRIOn knowledge base
www.prio-n.com
4

9 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

36.9%

The Import feature in the wp-advanced-search plugin 3.3.6 for WordPress is vulnerable to authenticated SQL injection via an uploaded .sql file. An attacker can use this to execute SQL commands without any validation.

CPENameOperatorVersion
wp-advanced-searchlt3.3.7

9 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

36.9%

Related for PRION:CVE-2020-12104