3 matches found
CVE-2020-27481
An unauthenticated SQL Injection vulnerability in Good Layers LMS Plugin = 2.1.4 exists due to the usage of "wpajaxnopriv" call in WordPress, which allows any unauthenticated user to get access to the function "gdlrlmscancelbooking" where POST Parameter "id" was sent straight into SQL query witho...
9.8CVSS8AI score0.10027EPSS
SaveExploits2
CVE-2020-27481
Good Layers LMS Plugin
9.8CVSS9.8AI score0.10027EPSS
SaveExploits2References1Affected Software1
VulnCheck KEV: CVE-2020-27481
An unauthenticated SQL Injection vulnerability in Good Layers LMS Plugin = 2.1.4 exists due to the usage of "wpajaxnopriv" call in WordPress, which allows any unauthenticated user to get access to the function "gdlrlmscancelbooking" where POST Parameter "id" was sent straight into SQL query...
9.8CVSS7.4AI score0.10027EPSS
SaveExploits2References1
20