Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2017-1002026

Vulnerability in wordpress plugin Event Expresso Free v3.1.37.11.L, The function edit_event_category does not sanitize user-supplied input via the $id parameter before passing it i

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
larry_cashdollar

Description

Vulnerability in wordpress plugin Event Expresso Free v3.1.37.11.L, The function edit_event_category does not sanitize user-supplied input via the $id parameter before passing it into an SQL statement.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Event Espresso Event Expresso Free

  • unspecified to < 3.1.37.11.Laffected

References