User Activity Log, CVE-2023-3435

CVE, Research URL: CVE-2023-3435
Home page URL: Security reports for User Activity Log
Application: User Activity Log
Published on: Aug 15, 2023
Research Description: The User Activity Log WordPress plugin before 1.6.5 does not correctly sanitise and escape several parameters before using it in a SQL statement as part of its exportation feature, allowing unauthenticated attackers to conduct SQL injection attacks.
Affected versions: max 1.6.6.
Status: vulnerable