Paper/Archive/CVE-2023-45830

CVE-2023-45830

Online ADA Accessibility Suite by Online ADA — WordPress Accessibility Suite by Online ADA Plugin <= 4.12 is vulnerable to SQL Injection

EPSS 0.7%public exploit CVSS 9.8

critical.is priorityof 100

CVSS 9.8 (NVD)9.8 / 10 × 3029.4 Not in CISA KEV+300.0 EPSS percentile 52.6.526 × 2010.5 Exploit: SSVC poc+1010.0 SSVC exploitation: poc+100.0

Description · from the CVE record

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Online ADA Accessibility Suite by Online ADA allows SQL Injection.This issue affects Accessibility Suite by Online ADA: from n/a through 4.12.

Affected

ProductAffectedFixed inSource

Accessibility Suite by Online ADAn/a – 4.12–CNA

accessibility_suite_by_online_ada≤ 4.12–CISA-ADP

accessibility_suite_by_online_ada4.13–CISA-ADP

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Patchstack (CNA)8.5CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L

CISA ADPSSVCExploitation: poc · Automatable: no · Technical impact: partial

References

refpatchstack.com/database/vulnerability/online-accessibility/wordpress-accessibility-suite-by-online-ada-plugin-4-11-sql-injection-vulnerability?_s_id=cve