SEUR vulnerabilities
We track 1 vulnerability in SEUR products across 2 products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 10, 2024.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest SEUR vulnerabilities
- 9.8 Critical severity
SEUR plugin: Improper Neutralization of Special Elements used in an SQL Command
The SEUR plugin, in its versions prior to 2.5.11, is vulnerable to time-based SQL injection through the use of the ‘id_order’ parameter of the ‘/modules/seur/ajax/saveCodFee.php’ endpoint.