CVE-2024-30498: WordPress CRM Perks Forms plugin <= 1.1.4 - Unauthenticated SQL Injection vulnerability
Published Mar 29, 2024
·Updated
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CRM Perks CRM Perks Forms.This issue affects CRM Perks Forms: from n/a through 1.1.4.
Affected Software
3 affected components
crmperks Crm Perks Forms Wordpress<1.1.5
CRM Perks CRM Perks Forms<=1.1.4
WordPress CRM Perks Forms<=1.1.4
Remediation
Information
Update to 1.1.5 or a higher version.
Event History
Mar 29, 2024
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·02:15 PM
DescriptionSeverityWeaknessAffected Software
Feb 21, 57075
Event
via NVD·07:19 PM
Frequently Asked Questions
1
What is the severity of CVE-2024-30498?
CVE-2024-30498 has a high severity due to its potential for SQL Injection exploitation.
2
How do I fix CVE-2024-30498?
To fix CVE-2024-30498, upgrade the CRM Perks Forms plugin to version 1.1.5 or later.
3
What systems are affected by CVE-2024-30498?
CVE-2024-30498 affects CRM Perks Forms versions from n/a through 1.1.4.
4
Can CVE-2024-30498 be exploited remotely?
Yes, CVE-2024-30498 can be exploited remotely by an attacker if the conditions are met.
5
Is user authentication required to exploit CVE-2024-30498?
No, CVE-2024-30498 can be exploited without user authentication.