nvd-json-data-feeds/CVE-2023/CVE-2023-50xx/CVE-2023-5041.json

{
  "id": "CVE-2023-5041",
  "sourceIdentifier": "contact@wpscan.com",
  "published": "2024-01-17T15:15:10.850",
  "lastModified": "2024-01-17T17:35:08.140",
  "vulnStatus": "Awaiting Analysis",
  "descriptions": [
    {
      "lang": "en",
      "value": "The Track The Click WordPress plugin before 0.3.12 does not properly sanitize query parameters to the stats REST endpoint before using them in a database query, allowing a logged in user with an author role or higher to perform time based blind SQLi attacks on the database."
    }
  ],
  "metrics": {},
  "references": [
    {
      "url": "https://wpscan.com/vulnerability/45194442-6eea-4e07-85a5-4a1e2fde3523",
      "source": "contact@wpscan.com"
    }
  ]
}