WordPress Ni CRM Lead plugin <= 1.3.0 - SQL Injection vulnerability

CVE-2024-54258

What is CVE-2024-54258?

An SQL Injection vulnerability exists in Ni CRM Lead, an application developed by Anzia. This vulnerability occurs due to improper neutralization of special elements used in SQL commands, allowing attackers to execute arbitrary SQL queries. The issue impacts all versions up to and including 1.3.0. Exploitation of this flaw may result in unauthorized access to sensitive data, manipulation of the database, or complete compromise of the application. Organizations using affected versions are advised to implement mitigations and update to the latest available version.

References