SQL Injection Vulnerability in Cost Of Goods

CVE-2024-53783

Summary

An SQL Injection vulnerability exists within the Anzia Ni WooCommerce Cost Of Goods plugin, allowing attackers to execute arbitrary SQL commands through improperly sanitized user inputs. This security flaw affects all versions of the plugin from unspecified to version 3.2.8, potentially compromising the integrity and security of the databases associated with the affected sites. Administrators using this plugin should promptly assess the security of their installations to prevent exploitation.

References