SQL Injection Vulnerability in Greenshift Query and Meta Addon

CVE-2024-43942

8.8HIGH

Key Information

Vendor: WPsoul
Status: Greenshift Query And Meta Addon
Vendor: CVE Published:; 29 August 2024

Summary

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Wpsoul Greenshift Query and Meta Addon allows SQL Injection.This issue affects Greenshift Query and Meta Addon: from n/a before 3.9.2.

Affected Version(s)

Greenshift Query and Meta Addon < 3.9.2

CVSS V3.1

Score:

8.8

Severity:

HIGH

Confidentiality:

High

Integrity:

High

Availability:

High

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

Low

User Interaction:

None

Scope:

Unchanged

Timeline

Vulnerability published.
Aug 29, 2024
Vulnerability Reserved.
Aug 18, 2024

Collectors

NVD DatabaseMitre Database

Credit

Dave Jong (Patchstack)