SQL Injection Vulnerability in CRM Perks Forms

CVE-2024-30499

Summary

An SQL injection vulnerability exists in CRM Perks Forms which allows attackers to manipulate SQL queries through improper neutralization of user input. This vulnerability impacts versions of CRM Perks Forms from n/a to 1.1.4, potentially enabling unauthorized access to sensitive data stored in the database. Exploiting this weakness could allow adversaries to extract, modify, or delete information, jeopardizing the integrity and confidentiality of the affected systems. Organizations using affected versions are advised to implement appropriate security measures and apply updates to mitigate risks.

References