CVE-2024-39638

WordPress Registrations for the Events Calendar plugin <= 2.12.2 - SQL Injection vulnerability

CVSS 8.5 HIGHEPSS 0.4%CWE-89

Vexday Risk Score

21Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS 8.5EPSS 0.4%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

29 ago 2024Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Roundup WP Registrations for the Events Calendar allows SQL Injection.This issue affects Registrations for the Events Calendar: from n/a through 2.12.2.

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L

Productos afectados

Roundup WP · Registrations for the Events Calendar

Referencias

https://patchstack.com/database/vulnerability/registrations-for-the-events-calendar/wordpress-registrations-for-the-events-calendar-plugin-2-12-2-sql-injection-vulnerability?_s_id=cve