| |
Vulnerability CVE-2023-5041
Published: 2024-01-17
| Description: |
The Track The Click WordPress plugin before 0.3.12 does not properly sanitize query parameters to the stats REST endpoint before using them in a database query, allowing a logged in user with an author role or higher to perform time based blind SQLi attacks on the database. |
References: |
https://wpscan.com/vulnerability/45194442-6eea-4e07-85a5-4a1e2fde3523
|
|
|
Copyright 2026, cxsecurity.com
|
|
|
