The YARPP WordPress plugin before... CVE-2023-0579
-
AV
AC
AU
C
I
A
发布：
2023-08-16
修订：
2023-11-07
The YARPP WordPress plugin before 5.30.3 does not validate and escape some of its shortcode attributes before using them in SQL statement/s, which could allow any authenticated users, such as subscribers to perform SQL Injection attacks.
漏洞利用/PoC
暂无可用Exp或PoC
受影响的平台与产品
当前有1条受影响产品信息
