CVE-2023-5082 — History Log by click5 < 1.0.13 - Admin+ Time-Based Blind SQL Injection
The History Log by click5 WordPress plugin before 1.0.13 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploit…
Published: 2023-11-06 · CVSS: 7.2 · CVSS 3.1
The History Log by click5 WordPress plugin before 1.0.13 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by admin users when using the Smash Balloon Social Photo Feed plugin alongside it.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7