Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
prionPRIOn knowledge basePRION:CVE-2023-5082
HistoryNov 06, 2023 - 9:15 p.m.

Sql injection

2023-11-0621:15:00
PRIOn knowledge base
www.prio-n.com
2
history log
wordpress
sql injection
vulnerability
nvd
click 5
plugin
admin users
smash balloon social photo feed

7.8 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

19.3%

JSON

The History Log by click5 WordPress plugin before 1.0.13 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by admin users when using the Smash Balloon Social Photo Feed plugin alongside it.

CPENameOperatorVersion
sitemap_by_click5lt1.0.13

Related

cvelist 1
cve 1
wpexploit 1
wpvulndb 1
nvd 1
wordfence 1
cvelist
cvelist
CVE-2023-5082 History Log by click5 < 1.0.13 - Admin+ Time-Based Blind SQL Injection
2023-11-06 20:40:37
cve
cve
CVE-2023-5082
2023-11-06 21:15:09
wpexploit
wpexploit
History Log by click5 < 1.0.13 - Admin+ Time-Based Blind SQL Injection
2023-10-16 00:00:00
wpvulndb
wpvulndb
History Log by click5 < 1.0.13 - Admin+ Time-Based Blind SQL Injection
2023-10-16 00:00:00
nvd
nvd
CVE-2023-5082
2023-11-06 21:15:09
wordfence
wordfence
Wordfence Intelligence Weekly WordPress Vulnerability Report (October 9, 2023 to October 15, 2023)
2023-10-19 15:52:27

7.8 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

19.3%

JSON
Related for PRION:CVE-2023-5082
cvelist1cve1wpexploit1wpvulndb1nvd1wordfence1