Threats tagged 'ghsa-7g4m-2955-87xx'

The sm page duplicator WordPress plugin version 1.0.0 and earlier contains a SQL Injection vulnerability. This flaw occurs because the plugin does not properly sanitize and escape stored values used in SQL statements when duplicating a page. Users with Editor role or higher privileges can exploit this vulnerability to perform SQL Injection attacks. The vulnerability has a high severity score of 8.1 and impacts confidentiality and integrity without affecting availability.