Lucene search

PRIOn knowledge basePRION:CVE-2023-52135

HistoryDec 29, 2023 - 11:15 a.m.

Sql injection

2023-12-2911:15:00

PRIOn knowledge base

www.prio-n.com

improper neutralization

special elements

sql command

vulnerability

wordpress

nvd

8 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

19.4%

JSON

Improper Neutralization of Special Elements used in an SQL Command (‘SQL Injection’) vulnerability in WS Form WS Form LITE – Drag & Drop Contact Form Builder for WordPress.This issue affects WS Form LITE – Drag & Drop Contact Form Builder for WordPress: from n/a through 1.9.170.

CPENameOperatorVersion
ws_formlt1.9.171

CPE	Name	Operator	Version
	ws_form	lt	1.9.171

References

patchstack.com/database/vulnerability/ws-form/wordpress-ws-form-lite-drag-drop-contact-form-builder-for-wordpress-plugin-1-9-170-sql-injection-vulnerability?_s_id=cve