CMSSoft CSV Product Import Export Vulnerable to SQL Injection

CVE-2024-49244

What is CVE-2024-49244?

An SQL injection vulnerability in the CMSSoft CSV Product Import Export for WooCommerce plugin allows attackers to inject malicious SQL queries through improper neutralization of special elements used in SQL commands. This vulnerability can lead to unauthorized access to sensitive data in the database. The issue impacts all versions up through 1.0.0 and highlights the need for cautious handling of input data to mitigate potential exploits.

References