Lucene search
+L

1 matches found

VulnCheck KEV
VulnCheck KEV
added 2020/10/10 12:00 a.m.12 views

VulnCheck KEV: CVE-2020-27481

An unauthenticated SQL Injection vulnerability in Good Layers LMS Plugin = 2.1.4 exists due to the usage of "wpajaxnopriv" call in WordPress, which allows any unauthenticated user to get access to the function "gdlrlmscancelbooking" where POST Parameter "id" was sent straight into SQL query...

9.8CVSS7.4AI score0.10027EPSS
SaveExploits2References1
Rows per page
Query Builder