Threats tagged 'ghsa-qv7x-qxqg-p2wh'

The Form Maker by 10Web WordPress plugin versions up to and including 1.15.42 contains an SQL Injection vulnerability via the 'inputs' parameter. This flaw allows unauthenticated attackers to inject additional SQL queries due to insufficient escaping and lack of proper query preparation. Exploitation can lead to unauthorized extraction of sensitive database information. The vulnerability has a high severity score of 7.5 but no known exploits in the wild have been reported. No patch or fixed version information is currently provided.