Vulnerability Details CVE-2023-23753
The 'Visforms Base Package for Joomla 3' extension is vulnerable to SQL Injection as concatenation is used to construct an SQL Query. An attacker can interact with the database and could be able to read, modify and delete data on it.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 50.4%
CVSS Severity
CVSS v3 Score 9.8
References
- https://blog.asturhackers.es/sql-injection-en-visforms-base-package-for-joomla-3-0-5-cve-2023-23753
- https://vi-solutions.de/en/announcements/867-security-announcement-cve-2023-23754
- https://blog.asturhackers.es/sql-injection-en-visforms-base-package-for-joomla-3-0-5-cve-2023-23753
- https://vi-solutions.de/en/announcements/867-security-announcement-cve-2023-23754
Products affected by CVE-2023-23753
-
cpe:2.3:a:vi-solutions:visforms:3.0.0
-
cpe:2.3:a:vi-solutions:visforms:3.0.4