Seur Oficial Project vulnerabilities
We track 1 vulnerability in Seur Oficial Project products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 10, 2024.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest Seur Oficial Project vulnerabilities
- 9.8 Critical severity
SEUR plugin: Improper Neutralization of Special Elements used in an SQL Command
The SEUR plugin, in its versions prior to 2.5.11, is vulnerable to time-based SQL injection through the use of the ‘id_order’ parameter of the ‘/modules/seur/ajax/saveCodFee.php’ endpoint.