Lucene search
+L

3 matches found

NVD
NVD
added 2023/12/20 6:15 p.m.24 views

CVE-2023-29096

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in BestWebSoft Contact Form to DB by BestWebSoft – Messages Database Plugin For WordPress.This issue affects Contact Form to DB by BestWebSoft – Messages Database Plugin For WordPress: from n/a throug...

8.8CVSS0.00706EPSS
SaveExploits0References1
CVE
CVE
added 2023/12/20 5:16 p.m.75 views

CVE-2023-29096

CVE-2023-29096 affects the WordPress plugin Contact Form to DB by BestWebSoft – Messages Database, with an SQL Injection due to improper neutralization of input in an SQL command. Affected versions:

8.8CVSS8.8AI score0.00706EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2023/04/17 12:0 a.m.13 views

WordPress Contact Form to DB by BestWebSoft Plugin <= 1.7.0 is vulnerable to SQL Injection

Software Contact Form to DB by BestWebSoft Type Plugin Vulnerable versions = 1.7.0 Fixed in 1.7.1 OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2023-29096 Patch priority Low CVSS severity Low 8.5 Developer Claim ownership PSID 44860e7fab20 Credits easyBug Required privilege...

8.8CVSS7.2AI score0.00706EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder