CVE-2024-10499 — AI-Engine < 2.6.5 - Admin+ SQLi
The AI Engine WordPress plugin before 2.6.5 does not sanitize and escape a parameter from one of its RESP API endpoint before using it in a SQL statement, allowing admins to per…
Published: 2024-12-12 · CVSS: 7.2 · CVSS 3.1
The AI Engine WordPress plugin before 2.6.5 does not sanitize and escape a parameter from one of its RESP API endpoint before using it in a SQL statement, allowing admins to perform SQL injection attacks
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7