CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L
What the vulnerability does
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ilGhera Woocommerce Support System allows SQL Injection.This issue affects Woocommerce Support System: from n/a through 1.2.1.
Explanation of Vulnerability in Simple Terms
Woocommerce Support System versions up to 1.2.1 contain a SQL injection vulnerability accessible to high-privilege users. An attacker with admin or manager access can craft malicious input to extract or modify database records. The vulnerability affects confidentiality and availability but requires administrative credentials to exploit.
What an attacker can do
Read or modify database records via SQL injection if they have admin/manager access.
Potential impact on your site
Admins or managers with compromised credentials can extract sensitive data or corrupt your support system database.
Conditions required to exploit
Attacker must have high-privilege account (admin or manager role) on the site.
Key dates
External resources
Related vulnerabilities
