CVE-2020-5579 — SQL Injection in Paid Memberships PRO

CWE-89 — SQL Injection3 documents3 sources
Severity
7.2HIGHNVD
EPSS
1.8%
top 17.06%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Strangerstudios Paid Memberships PROStranger Studios Paid Memberships
Timeline
PublishedMay 20
Latest updateMay 24

Description

SQL injection vulnerability in the Paid Memberships versions prior to 2.3.3 allows attacker with administrator rights to execute arbitrary SQL commands via unspecified vectors.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HExploitability: 1.2 | Impact: 5.9

Affected Packages2 packages

▶CVEListV5stranger_studios/paid_membershipsversions prior to 2.3.3

🔴Vulnerability Details

2
GHSA
GHSA-35h4-gw83-rq54: SQL injection vulnerability in the Paid Memberships versions prior to 2↗2022-05-24
▶
CVEList
CVE-2020-5579: SQL injection vulnerability in the Paid Memberships versions prior to 2↗2020-05-20
▶
CVE-2020-5579 — SQL Injection in Paid Memberships PRO | cvebase