Orta CVSS 4.8
CVE-2026-115262: CVE-2026-115262: SQL enjeksiyonu
Açıklama (NVD)
The Duplicator WordPress plugin before 5.1.0, duplicator-pro WordPress plugin before 5.1.0 does not restrict its database charset and collation rewrite to schema statements during a restore, so a value a Subscriber stores in their own profile can break out of its string literal and inject SQL into the restore's INSERT statement when an administrator restores the backup onto a server lacking one of the source's charsets or collations.
Özet bilgiler
- CVSS v3.1
- 4.8
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N - EPSS
- %0,18 (yüzdelik 8)
- CWE
- CWE-89
- Yama
- Yok / bilinmiyor