Welcart e-Commerce < 2.8.22 - Editor+ SQL Injection

2023-09-2800:00:00

wpscan.com

welcart

e-commerce

sql injection

vulnerability

editor role

7.3 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

19.4%

JSON

Description The plugin does not properly sanitize and escape a parameter before using it in an SQL statement, leading to an SQL injection exploitable by users with a role as low as an editor.

CPENameOperatorVersion
eq2.8.22

CPE	Name	Operator	Version
		eq	2.8.22

References

jvn.jp/en/jp/JVN97197972/