CVE-2023-3743 | THREATINT

Description

Ap Page Builder, in versions lower than 1.7.8.2, could allow a remote attacker to send a specially crafted SQL query to the product_one_img parameter to retrieve the information stored in the database.

Reserved 2023-07-18 | Published 2023-07-18 | Updated 2024-10-28 | Assigner INCIBE

HIGH: 7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Problem types

CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Product status

Default status

unaffected

Any version before 1.7.8.2

affected

Credits

David Manuel Herrera Rodríguez from Telefónica Tech team finder

References

www.incibe.es/...ion-vulnerability-leothemes-ap-page-builder

cve.org (CVE-2023-3743)

nvd.nist.gov (CVE-2023-3743)

Download JSON

Support options

Helpdesk Chat, Email, Knowledgebase
Telegram Chat

Subscribe to our newsletter to learn more about our work.