SQL Injection Vulnerability in CRM Perks Forms
CVE-2024-30499

8.8HIGH

Key Information:

Vendor

WordPress
Status
Crm Perks Forms
Vendor
CVE Published:
29 March 2024

What is CVE-2024-30499?

An SQL injection vulnerability exists in CRM Perks Forms which allows attackers to manipulate SQL queries through improper neutralization of user input. This vulnerability impacts versions of CRM Perks Forms from n/a to 1.1.4, potentially enabling unauthorized access to sensitive data stored in the database. Exploiting this weakness could allow adversaries to extract, modify, or delete information, jeopardizing the integrity and confidentiality of the affected systems. Organizations using affected versions are advised to implement appropriate security measures and apply updates to mitigate risks.

Affected Version(s)

CRM Perks Forms <= 1.1.4

References

https://patchstack.com/database/vulnerability/crm-perks-f...
vdb-entry

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

LVT-tholv2k (Patchstack Alliance)
.