CVE-2024-5975 — CZ Loan Management <= 1.1 - Unauthenticated SQLi
The CZ Loan Management WordPress plugin through 1.1 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthen…
Published: 2024-07-30 · CVSS: 9.1 · CVSS 3.1
The CZ Loan Management WordPress plugin through 1.1 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7