Simple Quotation vulnerabilities
We track 1 vulnerability in Simple Quotation products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on March 14, 2022.
1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score
Latest Simple Quotation vulnerabilities
- 8.8 High severity
Simple Quotation: Improper Neutralization of Special Elements used in an SQL Command
The Simple Quotation WordPress plugin through 1.3.2 does not have authorisation (and CSRF) checks in various of its AJAX actions and is lacking escaping of user data when using it in SQL statements, allowing any authenticated users, such as subscriber to perfo