Zephyr Project Manager vulnerabilities
We track 1 vulnerability in Zephyr Project Manager products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on September 19, 2022.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest Zephyr Project Manager vulnerabilities
- 9.8 Critical severity
Zephyr Project Manager: Improper Neutralization of Special Elements used in an SQL Command
The Zephyr Project Manager WordPress plugin before 3.2.5 does not sanitise and escape various parameters before using them in SQL statements via various AJAX actions available to both unauthenticated and authenticated users, leading to SQL injections