{ "id": "CVE-2023-28777", "sourceIdentifier": "audit@patchstack.com", "published": "2023-10-31T14:15:11.627", "lastModified": "2023-10-31T14:23:15.447", "vulnStatus": "Awaiting Analysis", "descriptions": [ { "lang": "en", "value": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LearnDash LearnDash LMS allows SQL Injection.This issue affects LearnDash LMS: from n/a through 4.5.3.\n\n" } ], "metrics": {}, "weaknesses": [ { "source": "audit@patchstack.com", "type": "Primary", "description": [ { "lang": "en", "value": "CWE-89" } ] } ], "references": [ { "url": "https://patchstack.com/database/vulnerability/sfwd-lms/wordpress-learndash-lms-plugin-4-5-3-contributor-sql-injection-vulnerability?_s_id=cve", "source": "audit@patchstack.com" } ] }