SQL Injection Vulnerability Affects MoveTo from n/a to 6.2

CVE-2024-25910

Summary

An SQL Injection vulnerability exists in the Skymoonlabs MoveTo plugin, enabling an attacker to manipulate SQL commands by exploiting improper neutralization of special elements. This vulnerability affects all versions of the MoveTo plugin from an unknown release up to version 6.2. If exploited, it may allow unauthorized users to execute arbitrary SQL queries against the database, potentially leading to data disclosure, data modification, or even complete compromise of the underlying system. Users of the MoveTo plugin are advised to review their installations and apply any available security updates to mitigate the risks associated with this vulnerability.

References