Lucene search
+L

3 matches found

NVD
NVD
added 2024/03/28 5:15 a.m.20 views

CVE-2024-30242

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in IT Path Solutions Contact Form to Any API.This issue affects Contact Form to Any API: from n/a through 1.1.8...

8.5CVSS8.8AI score0.00549EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/03/28 4:35 a.m.28 views

CVE-2024-30242 WordPress Contact Form to Any API plugin <= 1.1.8 - Auth. SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in IT Path Solutions Contact Form to Any API.This issue affects Contact Form to Any API: from n/a through 1.1.8...

8.5CVSS8.9AI score0.00549EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2024/03/26 12:0 a.m.10 views

WordPress Contact Form to Any API Plugin <= 1.1.8 is vulnerable to SQL Injection

Software Contact Form to Any API Type Plugin Vulnerable versions = 1.1.8 Fixed in 1.1.9 OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-30242 Patch priority High CVSS severity High 8.5 Developer Claim ownership PSID f2d596609a9a Credits Le Ngoc Anh Required privilege Subscrib...

8.5CVSS7.2AI score0.00549EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder