CVE-2020-10817
HIGH
8.8
CVSS 3.1
Description
The custom-searchable-data-entry-system (aka Custom Searchable Data Entry System) plugin through 1.7.1 for WordPress allows SQL Injection. NOTE: this product is discontinued.
Affected WordPress components
-
custom-searchable-data-entry-system Plugin · custom-searchable-data-entry-systemVersions not specifiedView on WordPress.org
A confirmed match is backed by the plugin or theme slug. A possible match is based on the product name only and should be verified.
Affected products and versions
- n/a n/a — Versions not specified
- custom_searchable_data_entry_system_project custom_searchable_data_entry_system — Up to and including 1.7.1
References
- avveng.com http://avveng.com/cve.html Exploit, Third Party Advisory
- plugins.trac.wordpress.org https://plugins.trac.wordpress.org/log/custom-searchable-data-entry-system/ Third Party Advisory
- nvd.nist.gov Official NVD record