1 matches found
CVE-2023-6030: Improper Neutralization of Special Elements used in an SQL Command
The LogDash Activity Log WordPress plugin before 1.1.4 hooks the wploginfailed function from src/Hooks/Users.php in order to log failed login attempts to the database but it doesn't escape the username when it perform some SQL request leading to a SQL injection vulnerability which can be exploite...
5.4CVSS5.9AI score0.00841EPSS
SaveExploits1References1
20