CVE-2023-35910

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Nucleusgenius Quasar form free – Contact Form Builder for WordPress allows SQL Injection.This issue affects Quasar form free – Contact Form Builder for WordPress: from n/a through 6.0...

CVE-2023-35910 WordPress Quasar form Plugin <= 6.0 is vulnerable to SQL Injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Nucleusgenius Quasar form free – Contact Form Builder for WordPress allows SQL Injection.This issue affects Quasar form free – Contact Form Builder for WordPress: from n/a through 6.0...

CVE-2023-35910

CVE-2023-35910 affects Quasar form free – Contact Form Builder for WordPress (WordPress plugin Quasar form) up to version 6.0. The vulnerability is an SQL injection caused by improper neutralization of input, with CVSS v3.1 metrics indicating high impact on confidentiality, integrity, and availab...

WordPress Quasar form Plugin <= 6.0 is vulnerable to SQL Injection

Software Quasar form Type Plugin Vulnerable versions = 6.0 Fixed in N/A OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2023-35910 Patch priority Low CVSS severity Low 8.5 Developer Claim ownership PSID 8a27aca8635c Credits Emili Castells Required privilege Contributor Published 2...