WP Zoho for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms – CRM, Bigin, CVE-2023-2527
- CVE, Research URL
- Home page URL
- Application
-
WP Zoho for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms – CRM, Bigin
- Published on
- Jun 19, 2023
- Research Description
- The Integration for Contact Form 7 and Zoho CRM, Bigin WordPress plugin before 1.2.4 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admin
- Affected versions
-
max 1.2.4.
- Status
-
vulnerable