Vulnerabilities > Addify > Free Gifts

DATE CVE VULNERABILITY TITLE RISK
2023-11-01 CVE-2023-44025 SQL Injection vulnerability in Addify Free Gifts 1.0.2
SQL injection vulnerability in addify Addifyfreegifts v.1.0.2 and before allows a remote attacker to execute arbitrary code via a crafted script to the getrulebyid function in the AddifyfreegiftsModel.php component.
network
low complexity
addify CWE-89
critical
9.8