CVE-2024-30499: WordPress CRM Perks Forms plugin <= 1.1.4 - SQL Injection vulnerability
Published Mar 29, 2024
·Updated
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CRM Perks CRM Perks Forms.This issue affects CRM Perks Forms: from n/a through 1.1.4.
Affected Software
3 affected components
crmperks Crm Perks Forms Wordpress<1.1.5
CRM Perks CRM Perks Forms<=1.1.4
WordPress CRM Perks Forms<=1.1.4
Remediation
Information
Update to 1.1.5 or a higher version.
Event History
Mar 29, 2024
CVE Published
via MITRE·02:01 PM
Data Sourced
via MITRE·02:01 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·02:15 PM
DescriptionSeverityWeaknessAffected Software
Feb 21, 57075
Event
via NVD·07:20 PM
Frequently Asked Questions
1
What is the severity of CVE-2024-30499?
CVE-2024-30499 is classified as a high severity SQL Injection vulnerability.
2
How do I fix CVE-2024-30499?
To fix CVE-2024-30499, update CRM Perks Forms to version 1.1.5 or later.
3
What applications are affected by CVE-2024-30499?
CVE-2024-30499 affects versions of CRM Perks Forms from n/a through 1.1.4.
4
What type of vulnerability is CVE-2024-30499?
CVE-2024-30499 is an SQL Injection vulnerability caused by improper neutralization of special elements used in SQL commands.
5
What can an attacker do with CVE-2024-30499?
An attacker can exploit CVE-2024-30499 to execute arbitrary SQL commands on the database.