NA

CVE-2023-1730

Published: 02/05/2023 Updated: 07/11/2023
CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9
VMScore: 0

Vulnerability Summary

The SupportCandy WordPress plugin prior to 3.1.5 does not validate and escape user input before using it in an SQL statement, which could allow unauthenticated malicious users to perform SQL injection attacks

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

supportcandy supportcandy