vendor:
easy2map
by:
Larry W. Cashdollar
9
CVSS
HIGH
SQL Injection
89
CWE
Product Name: easy2map
Affected Version From: 1.24
Affected Version To: 1.24
Patch Exists: Yes
Related CWE: CVE-2015-4456
CPE: cpe:a:steven_ellis:easy2map
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: WordPress
2015
SQL Injection in easy2map wordpress plugin v1.24
The easy2map plugin for WordPress is vulnerable to a SQL injection vulnerability due to the lack of sanitization of user input when constructing SQL queries. An attacker can exploit this vulnerability by sending a specially crafted request to the vulnerable plugin. This can allow an attacker to execute arbitrary SQL commands on the underlying database, potentially allowing them to gain access to sensitive data.
Mitigation:
Upgrade to version 1.25 or later of the easy2map plugin.