CVE-2023-5429

CVE-2023-5429 affects the WordPress plugin Information Reel. The vulnerability is a SQL Injection via the plugin’s shortcode caused by insufficient escaping of user-supplied parameters and inadequate preparation of the SQL query. It enables authenticated attackers with subscriber-level permission...