CVEvulnerability

CVE-2014-5185

6.0 MEDIUM Published 2014-08-06 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2014-08-06
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.0 MEDIUM — AV:N/AC:M/Au:S/C:P/I:P/A:P
Weaknesses
CWE-89

Description

SQL injection vulnerability in the Quartz plugin 1.01.1 for WordPress allows remote authenticated users with Contributor privileges to execute arbitrary SQL commands via the quote parameter in an edit action in the quartz/quote_form.php page to wp-admin/edit.php.

Affected configurations

• quartz plugin project quartz plugin 1.01.1

Related

Weakness · CWE (1)

  • CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness

References