Lucene search
PRIOn knowledge basePRION:CVE-2023-2221HistoryJun 19, 2023 - 11:15 a.m.
Sql injection
2023-06-1911:15:00
PRIOn knowledge base
www.prio-n.com
7
wp custom cursors
sql injection
wordpress plugin
admin role
0.001 Low
EPSS
Percentile
26.2%
The WP Custom Cursors WordPress plugin before 3.2 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by users with a role as low as Admin.
| CPE | Name | Operator | Version |
|---|---|---|---|
| wp_custom_cursors | lt | 3.2 |
Related
cvelist
cvelist
CVE-2023-2221 WP Custom Cursors < 3.2 - Admin+ SQLi
2023-06-19 10:52:42
cve
cve
CVE-2023-2221
2023-06-19 11:15:09
wpvulndb
wpvulndb
WP Custom Cursors < 3.2 - Admin+ SQLi
2023-05-24 00:00:00
nvd
nvd
CVE-2023-2221
2023-06-19 11:15:09
wpexploit
wpexploit
WP Custom Cursors < 3.2 - Admin+ SQLi
2023-05-24 00:00:00