CVE-2020-8242

Unsanitized user input in ExpressionEngine = 5.4.0 control panel member creation leads to an SQL injection. The user needs member creation/admin control panel access to execute the attack...

CVE-2020-8242

CVE-2020-8242 refers to an SQL injection in ExpressionEngine (open-source CMS) caused by unsanitized user input during control panel member creation. The vulnerability affects ExpressionEngine versions up to and including 5.4.0 and requires the attacker to have access to the control panel’s membe...