Skip to content
CVE PROGRAM SOURCE RECORD9.4 Critical

CVE-2024-9201

SQL injection vulnerability in SEUR plugin

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
INCIBE

Description

The SEUR plugin, in its versions prior to 2.5.11, is vulnerable to time-based SQL injection through the use of the ‘id_order’ parameter of the ‘/modules/seur/ajax/saveCodFee.php’ endpoint.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SEUR SEUR plugin

Default version status: unaffected

  • 0 to < 2.5.11affected

References