The All In One Redirection WordPress plugin before 2.2.0 does not properly sanitise and escape multiple parameters before using them in an SQL statement, leading to a SQL injection exploitable by high privilege users such as admin.
References
Link | Resource |
---|---|
https://wpscan.com/vulnerability/a9a205a4-eef9-4f30-877a-4c562930650c | Exploit Third Party Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: WPScan
Published: 2023-07-10T12:40:10.450Z
Updated: 2023-07-10T13:05:41.028Z
Reserved: 2023-05-03T13:44:36.032Z
Link: CVE-2023-2493
JSON object: View
NVD Information
Status : Modified
Published: 2023-07-10T16:15:51.120
Modified: 2023-11-07T04:12:45.970
Link: CVE-2023-2493
JSON object: View
Redhat Information
No data.
CWE
No CWE.