CVSS base score
CVSS vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
What the vulnerability does
A vulnerability, which was classified as critical, has been found in webuidesigning NebulaX Theme up to 5.0 on WordPress. This issue affects the function nebula_send_to_hubspot of the file libs/Legacy/Legacy.php. The manipulation leads to sql injection. The attack may be initiated remotely. The patch is named 41230a81db0f671c570c2644bc2f80565ca83c5a. It is recommended to apply a patch to fix this issue.
Explanation of Vulnerability in Simple Terms
NebulaX Theme versions 5.0 and later contain a SQL injection vulnerability in an unspecified component. An attacker with low-level site access can inject malicious SQL commands through user input, potentially reading or modifying database contents. The vulnerability requires authentication and network access but no user interaction.
What an attacker can do
Read or modify database contents via SQL injection.
Potential impact on your site
Database contents could be exposed or altered by authenticated attackers.
Conditions required to exploit
Attacker must have low-level site access (authenticated user account).
Key dates
External resources
Related vulnerabilities
