CVE-2024-0405: Improper Neutralization of Special Elements used in an SQL Command

The Burst Statistics – Privacy-Friendly Analytics for WordPress plugin, version 1.5.3, is vulnerable to Post-Authenticated SQL Injection via multiple JSON parameters in the /wp-json/burst/v1/data/compare endpoint. Affected parameters include 'browser', 'device', 'pageid', 'pageurl', 'platform', a...

PT-2024-15531

Name of the Vulnerable Software and Affected Versions The Burst Statistics – Privacy-Friendly Analytics for WordPress plugin version 1.5.3 Description The issue arises due to insufficient escaping of user-supplied parameters and the lack of adequate preparation in SQL queries, allowing...