admin/cve
1
0
Fork 0
mirror of https://github.com/0xMarcio/cve.git synced 2025-05-06 02:31:38 +00:00
Code Issues Packages Projects Releases Wiki Activity
cve/2023/CVE-2023-0098.md
0xMarcio e6ecd99f3d Update CVE sources 2024-06-07 17:53
2024-06-07 17:53:02 +00:00

791 B
Raw Blame History

CVE-2023-0098

Description

The Simple URLs WordPress plugin before 115 does not escape some parameters before using them in various SQL statements used by AJAX actions available by any authenticated users, leading to a SQL injection exploitable by low privilege users such as subscriber.

POC

Reference

Github

No PoCs found on GitHub currently.