CVE-2023-0381 — GigPress <= 2.3.28 - Subscriber+ SQLi
The GigPress WordPress plugin through 2.3.28 does not validate and escape some of its shortcode attributes before using them in SQL statement/s, which could allow any authentica…
Published: 2023-02-27 · CVSS: 8.8 · CVSS 3.1
The GigPress WordPress plugin through 2.3.28 does not validate and escape some of its shortcode attributes before using them in SQL statement/s, which could allow any authenticated users, such as subscriber to perform SQL Injection attacks
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7