Lucene search
PRIOn knowledge basePRION:CVE-2023-4776HistoryOct 16, 2023 - 8:15 p.m.
Sql injection
2023-10-1620:15:00
PRIOn knowledge base
www.prio-n.com
5
sql injection
wordpress plugin
esc_sql function
query preparation
low-privilege users
teachers
0.001 Low
EPSS
Percentile
19.4%
The School Management System WordPress plugin before 2.2.5 uses the WordPress esc_sql() function on a field not delimited by quotes and did not first prepare the query, leading to a SQL injection exploitable by relatively low-privilege users like Teachers.
| CPE | Name | Operator | Version |
|---|---|---|---|
| wpschoolpress | lt | 2.2.5 |
Related
wpexploit
wpexploit
WPSchoolPress < 2.2.5 - Teacher+ SQLi
2023-09-25 00:00:00
wpvulndb
wpvulndb
WPSchoolPress < 2.2.5 - Teacher+ SQLi
2023-09-25 00:00:00
cvelist
cvelist
CVE-2023-4776 WPSchoolPress < 2.2.5 - Teacher+ SQLi
2023-10-16 19:38:59
cve
cve
CVE-2023-4776
2023-10-16 20:15:16
nvd
nvd
CVE-2023-4776
2023-10-16 20:15:16
wordfence
wordfence