CVE-2023-2527

The Integration for Contact Form 7 and Zoho CRM, Bigin WordPress plugin before 1.2.4 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admin
Configurations

Configuration 1 (hide)

cpe:2.3:a:crmperks:integration_for_contact_form_7_and_zoho_crm\,_bigin:*:*:*:*:*:wordpress:*:*

History

12 Dec 2024, 01:20

Type Values Removed Values Added
References
  • () https://wpscan.com/vulnerability/8051142a-4e55-4dc2-9cb1-1b724c67574f/ -

Information

Published : 2023-06-19 11:15

Updated : 2024-12-12 01:20


NVD link : CVE-2023-2527

Mitre link : CVE-2023-2527

CVE.ORG link : CVE-2023-2527


JSON object : View

Products Affected

crmperks

  • integration_for_contact_form_7_and_zoho_crm\,_bigin
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')