GitHub Advisoryadvisory · Packagist

GHSA-87fg-9x5w-j3rm MainWP Dashboard SQL Command Injection vulnerability

HIGH Published 2023-12-20 Modified 2023-12-28 Official page ↗
Aliases
CVE-2023-38519
Ecosystem
Packagist
Packages
mainwp/mainwp
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L
Weaknesses
CWE-89
Reviewed
2023-12-28

Affected packages

• Packagist mainwp/mainwp: < 4.4.3.4 → fixed in 4.4.3.4

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in MainWP MainWP Dashboard – WordPress Manager for Multiple Websites Maintenance.This issue affects MainWP Dashboard – WordPress Manager for Multiple Websites Maintenance: from n/a through 4.4.3.3.

Related

Alias · CVE (1)

  • CVE-2023-38519 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in MainWP MainWP Dashboard – WordPress… vulnerability

Weakness · CWE (1)

  • CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness

References