CVE-2023-30872: WordPress BSK Forms Blacklist Plugin <= 3.6.2 is vulnerable to SQL Injection
Published Dec 20, 2023
·Updated
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in BannerSky BSK Forms Blacklist.This issue affects BSK Forms Blacklist: from n/a through 3.6.2.
Affected Software
1 affected component
BannerSky Bsk Forms Blacklist Wordpress<3.6.3
Remediation
Information
Update to 3.6.3 or a higher version.
Event History
Dec 20, 2023
CVE Published
via MITRE·05:03 PM
Data Sourced
via MITRE·05:03 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·05:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2023-30872?
CVE-2023-30872 is considered a high severity SQL Injection vulnerability that can allow unauthorized access to sensitive data.
2
How do I fix CVE-2023-30872?
To fix CVE-2023-30872, update Bannersky BSK Forms Blacklist to version 3.6.3 or later.
3
What software is affected by CVE-2023-30872?
CVE-2023-30872 affects Bannersky BSK Forms Blacklist versions up to 3.6.2.
4
What types of attacks can CVE-2023-30872 facilitate?
CVE-2023-30872 can facilitate SQL injection attacks that may compromise the application's database.
5
How can I determine if my site is vulnerable to CVE-2023-30872?
You can determine if your site is vulnerable to CVE-2023-30872 by checking if you are running Bannersky BSK Forms Blacklist version 3.6.2 or earlier.