Pricing Table by Supsystic, 5bebf9a194c10914436566573ac735dbc551290a

CVE, Research URL: 5bebf9a194c10914436566573ac735dbc551290a
Home page URL: Security reports for Pricing Table by Supsystic
Application: Pricing Table by Supsystic
Published on: Feb 08, 2021
Research Description: Pricing Table by Supsystic [pricing-table-by-supsystic] < 1.8.9 Pricing Table by Supsystic <= 1.8.8 - Boolean-Based Blind SQL Injections The Pricing Table by Supsystic plugin for WordPress is vulnerable to boolean-based blind SQL Injection via the ‘sidx’ parameter in versions up to, and including, 1.8.8 due to insufficient escaping on the user-supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
Affected versions: max 1.8.9.
Status: vulnerable