Vulnerability Details CVE-2017-1002018
Vulnerability in wordpress plugin eventr v1.02.2, The edit.php form and attendees.php code do not sanitize input, this allows for blind SQL injection via the event parameter.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.06
EPSS Ranking 90.4%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 7.5
References
Products affected by CVE-2017-1002018
-
cpe:2.3:a:eventr_project:eventr:1.02.2