CVE-2023-2111 — HollerBox < 2.1.4 - Admin+ SQL Injection
The Fast & Effective Popups & Lead-Generation for WordPress plugin before 2.1.4 concatenates user input into an SQL query without escaping it first in the plugin's report API en…
Published: 2023-05-30 · CVSS: 4.9 · CVSS 3.1
The Fast & Effective Popups & Lead-Generation for WordPress plugin before 2.1.4 concatenates user input into an SQL query without escaping it first in the plugin's report API endpoint, which could allow administrators in multi-site configuration to leak sensitive information from the site's database.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7