Five Minute Webshop Project: >> Five Minute Webshop >> 1.3.2 Security Vulnerabilities
The Five Minute Webshop WordPress plugin through 1.3.2 does not properly validate and sanitise the orderby parameter before using it in a SQL statement via the Manage Products admin page, leading to an SQL Injection
CVSS Score
4.9
EPSS Score
0.002
Published
2022-06-08
The Five Minute Webshop WordPress plugin through 1.3.2 does not sanitise and escape the id parameter before using it in a SQL statement when editing a product via the admin dashboard, leading to an SQL Injection
CVSS Score
2.7
EPSS Score
0.002
Published
2022-06-08