Vulnerability Details CVE-2023-2527
The Integration for Contact Form 7 and Zoho CRM, Bigin WordPress plugin before 1.2.4 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admin
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 21.6%
CVSS Severity
CVSS v3 Score 4.8
References
Products affected by CVE-2023-2527
-
_bigin:1.2.2
-
cpe:2.3:a:crmperks:integration_for_contact_form_7_and_zoho_crm