Lucene search
PRIOn knowledge basePRION:CVE-2023-2719HistoryJun 19, 2023 - 11:15 a.m.
Sql injection
2023-06-1911:15:00
PRIOn knowledge base
www.prio-n.com
sql injection
wordpress
supportcandy
rest api
security vulnerability
user role
The SupportCandy WordPress plugin before 3.1.7 does not properly sanitise and escape the id parameter for an Agent in the REST API before using it in an SQL statement, leading to an SQL Injection exploitable by users with a role as low as Subscriber.
| CPE | Name | Operator | Version |
|---|---|---|---|
| supportcandy | lt | 3.1.7 |
Related
nvd
nvd
CVE-2023-2719
2023-06-19 11:15:10
cve
cve
CVE-2023-2719
2023-06-19 11:15:10
cvelist
cvelist
CVE-2023-2719 SupportCandy < 3.1.7 - Subscriber+ SQLi
2023-06-19 10:52:42
wordfence
wordfence