cleantalk
Vulnerabilities and Security Researches

JoomSport – for Sports: Team & League, Football, Hockey & more, CVE-2019-14348

CVE, Research URL

CVE-2019-14348

Published on
Aug 05, 2019
Research Description
The BearDev JoomSport plugin 3.3 for WordPress allows SQL injection to steal, modify, or delete database information via the joomsport_season/new-yorkers/?action=playerlist sid parameter.
Affected versions
max 3.4.
Status
vulnerable