CVE-2023-3435
14.08.2023, 20:15
The User Activity Log WordPress plugin before 1.6.5 does not correctly sanitise and escape several parameters before using it in a SQL statement as part of its exportation feature, allowing unauthenticated attackers to conduct SQL injection attacks.Enginsight
| Vendor | Product | Version |
|---|---|---|
| solwininfotech | user_activity_log | 𝑥 < 1.6.5 |
𝑥
= Vulnerable software versions