CVE-2020-20981

MetInfo 7.0 contains a SQL injection in the admin/logs dolist path (/admin/?n=logs&c=index&a=dolist) that can lead to access to sensitive database information. This is confirmed across multiple records (NVD description, Red Hat, NVD listing, and CNVD/CVE aggregations). The vulnerability affects t...

CVE-2018-20981

CVE-2018-20981 affects the WordPress Ninja Forms plugin prior to version 3.3.9. The issue is described as insufficient restrictions on submission-data retrieval during Export Personal Data requests, which could enable access to personal data during the export process. The available connected docu...