Required CVE Record Information
Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP Travel WP Travel allows SQL Injection. This issue affects WP Travel: from n/a through 10.1.0.
CWE 1 Total
CVSS 1 Total
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 7.6 | HIGH | 3.1 | CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L |
Credits
- Trương Hữu Phúc (truonghuuphuc) (Patchstack Alliance) finder