cbcvebase.

Calendarscripts Watupro vulnerabilities

1 known vulnerability affecting calendarscripts/watupro.

Total CVEs
1
CISA KEV
0
Public exploits
1
Exploited in wild
0
Severity breakdown
CRITICAL1

Vulnerabilities

Page 1 of 1
CVE-2017-9834P2CRITICALCVSS 9.8PoC≤ 5.5.12017-09-07
CVE-2017-9834 [CRITICAL] CWE-89 CVE-2017-9834: SQL injection vulnerability in the WatuPRO plugin before 5.5.3.7 for WordPress allows remote attacke SQL injection vulnerability in the WatuPRO plugin before 5.5.3.7 for WordPress allows remote attackers to execute arbitrary SQL commands via the watupro_questions parameter in a watupro_submit action to wp-admin/admin-ajax.php.
nvd
Calendarscripts Watupro vulnerabilities | cvebase