Feed/CVE-2017-1002018
CVE-2017-1002018CRITICALCVSS 9.8

CVE-2017-1002018

Published Sep 14, 2017·Updated Jun 16, 2026

NVD Description

Vulnerability in wordpress plugin eventr v1.02.2, The edit.php form and attendees.php code do not sanitize input, this allows for blind SQL injection via the event parameter.

CVSS Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

View on NVD Search GitHub Search Google

Get alerted for CVEs like this

Register your stack and get notified within minutes when a matching CVE drops.

Start monitoring free