Vulnerability — CVE-2023-5108

CVE-2023-5108

Reference to the description:: https://nvd.nist.gov/vuln/detail/CVE-2023-5108
Description:: The Easy Newsletter Signups WordPress plugin through 1.0.4 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admin
Last updated date:: 12/07/2023

Type:: exploit
Confidence:: HIGH
Date of publishing:: 12/07/2023
Reference url to background: https://wpscan.com/vulnerability/1b277929-e88b-4ab6-9190-526e75f5ce7a