Easy Social Icons < 3.1.4 - Admin+ SQL Injection
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 1.3%
exploitation probability
1.3%top 33% of all CVEs
observed exploitation
nono source reports it
The Easy Social Icons WordPress plugin before 3.1.4 does not sanitize the selected_icons attribute to the cnss_widget before using it in an SQL statement, leading to a SQL injection vulnerability.
Affected products
Unknown · Easy Social Icons