Trillium Injection Vulnerability

Trillium is a composable toolkit from the Trillium community for building Internet applications using asynchronous Rust. An injection vulnerability exists in Trillium versions prior to 0.3.12 and 0.5.x prior to 0.5.4, which stems from insufficient header validation and may result in a split reque...

PT-2024-13936 · WordPress · Track The Click

Name of the Vulnerable Software and Affected Versions: The Track The Click WordPress plugin versions prior to 0.3.12 Description: The issue arises from the plugin's failure to properly sanitize query parameters to the stats REST endpoint before using them in a database query. This allows a...