CVE-2017-1002018

Critical

Published: 14/09/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Vulnerability in WordPress plugin eventr version 1.02.2, due to lack of input sanitization in the edit.php form and attendees.php code, allowing for blind SQL injection via the event parameter.

Risk Assessment

An attacker could exploit this vulnerability to execute unauthorized queries against the database, potentially leading to the disclosure of sensitive information or system compromise.

Recommendation

It is recommended to update the eventr plugin to the latest version that includes security fixes and to implement input sanitization in forms.

Original NVD description (English source)

Vulnerability in wordpress plugin eventr v1.02.2, The edit.php form and attendees.php code do not sanitize input, this allows for blind SQL injection via the event parameter.