Lucene search
WpvulndbWPVDB-ID:4A82F7E8-3A50-44FA-8630-31AD2D134AC5HistorySep 28, 2023 - 12:00 a.m.
Welcart e-Commerce < 2.8.22 - Author+ SQL Injection
2023-09-2800:00:00
wpscan.com
7
welcart e-commerce
sql injection
vulnerability
author role
Description The plugin does not properly sanitize and escape a parameter before using it in an SQL statement, leading to an SQL injection exploitable by users with a role as low as an author.
| CPE | Name | Operator | Version |
|---|---|---|---|
| eq | 2.8.22 |
References
Related
nvd
nvd
CVE-2023-43493
2023-09-27 15:19:34
cve
cve
CVE-2023-43493
2023-09-27 15:19:34
prion
prion
Sql injection
2023-09-27 15:19:00
cvelist
cvelist
CVE-2023-43493
2023-09-26 08:18:24
jvn
jvn
7.3 High
AI Score
Confidence
High
0.0005 Low
EPSS
Percentile
18.3%
Related for WPVDB-ID:4A82F7E8-3A50-44FA-8630-31AD2D134AC5