No Chart

CVSS 6.5 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

HIGH

Integrity impact

NONE

Availability impact

NONE

network

low complexity

kohsei-works

NVD

Published: 2021-06-14

Updated: 2024-11-21

Summary

The Yes/No Chart WordPress plugin before 1.0.12 did not sanitise its sid shortcode parameter before using it in a SQL statement, allowing medium privilege users (contributor+) to perform Blind SQL Injection attacks

Vulnerable Configurations

Part	Description	Count
Application	Kohsei-Works Kohsei Works Yes/No Chart 1.0.0 Kohsei Works Yes/No Chart 1.0.1 Kohsei Works Yes/No Chart 1.0.2 Kohsei Works Yes/No Chart 1.0.3 Kohsei Works Yes/No Chart 1.0.4 Kohsei Works Yes/No Chart 1.0.5 Kohsei Works Yes/No Chart 1.0.6 Kohsei Works Yes/No Chart 1.0.7 Kohsei Works Yes/No Chart 1.0.8 Kohsei Works Yes/No Chart 1.0.9 Kohsei Works Yes/No Chart 1.0.10 Kohsei Works Yes/No Chart 1.0.11	12

Summary

Vulnerable Configurations

References