SQL Injection Vulnerability in Roundup WP Registrations for the Events Calendar

CVE-2024-39638

8.8HIGH

Key Information

Vendor: Roundup WP
Status: Registrations For The Events Calendar
Vendor: CVE Published:; 29 August 2024

Summary

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Roundup WP Registrations for the Events Calendar allows SQL Injection.This issue affects Registrations for the Events Calendar: from n/a through 2.12.2.

Affected Version(s)

Registrations for the Events Calendar <= 2.12.2

CVSS V3.1

Score:

8.8

Severity:

HIGH

Confidentiality:

High

Integrity:

High

Availability:

High

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

Low

User Interaction:

None

Scope:

Unchanged

Timeline

Vulnerability published.
Aug 29, 2024
Vulnerability Reserved.
Jun 26, 2024

Collectors

NVD DatabaseMitre Database

Credit

Trương Hữu Phúc / truonghuuphuc (Patchstack Alliance)