CVE-2017-1002023

Critical

Published: 14/09/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Vulnerability in WordPress plugin Easy Team Manager v1.3.2 is due to the lack of sanitization of the identifier before it is used in an SQL statement. The issue is present in the file ./easy-team-manager/inc/easy_team_manager_desc_edit.php.

Risk Assessment

The lack of sanitization of the identifier may lead to SQL Injection attacks, jeopardizing the integrity of the database and the security of the application.

Recommendation

It is recommended to update the plugin to the latest version and to implement proper input sanitization before using the data in SQL queries.

Original NVD description (English source)

Vulnerability in wordpress plugin Easy Team Manager v1.3.2, The code does not sanitize id before making it part of an SQL statement in file ./easy-team-manager/inc/easy_team_manager_desc_edit.php