Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-0579
HistoryAug 16, 2023 - 12:15 p.m.

Sql injection

2023-08-1612:15:00
PRIOn knowledge base
www.prio-n.com
3
yarpp
wordpress
sql injection
shortcode attributes
nvd

8.9 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

19.9%

The YARPP WordPress plugin before 5.30.3 does not validate and escape some of its shortcode attributes before using them in SQL statement/s, which could allow any authenticated users, such as subscribers to perform SQL Injection attacks.

CPENameOperatorVersion
yarpplt5.30.3

8.9 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

19.9%