CVE-2024-30498: WordPress CRM Perks Forms plugin <= 1.1.4 - Unauthenticated SQL Injection vulnerability
Published Mar 29, 2024
·Updated
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CRM Perks CRM Perks Forms.This issue affects CRM Perks Forms: from n/a through 1.1.4.
Affected Software
3 affected components
crmperks Crm Perks Forms Wordpress<1.1.5
CRM Perks CRM Perks Forms<=1.1.4
WordPress CRM Perks Forms<=1.1.4
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress CRM Perks Formsto a version that resolves this vulnerability.Fixed in 1.1.5
Event History
Mar 29, 2024
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·02:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-30498?
CVE-2024-30498 has a high severity due to its potential for SQL Injection exploitation.
2
How do I fix CVE-2024-30498?
To fix CVE-2024-30498, upgrade the CRM Perks Forms plugin to version 1.1.5 or later.
3
What systems are affected by CVE-2024-30498?
CVE-2024-30498 affects CRM Perks Forms versions from n/a through 1.1.4.
4
Can CVE-2024-30498 be exploited remotely?
Yes, CVE-2024-30498 can be exploited remotely by an attacker if the conditions are met.
5
Is user authentication required to exploit CVE-2024-30498?
No, CVE-2024-30498 can be exploited without user authentication.