CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L
What the vulnerability does
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in sudipto Link to URL / Post link-to-url-post allows Blind SQL Injection.This issue affects Link to URL / Post: from n/a through <= 1.3.
Explanation of Vulnerability in Simple Terms
A SQL injection vulnerability exists in Link to URL / Post versions 1.3 and earlier. An attacker with high-level privileges can inject malicious SQL queries through the plugin, potentially reading sensitive database information. The vulnerability affects the broader site scope and may cause service disruption.
What an attacker can do
Read sensitive data from the site database and cause partial service disruption.
Potential impact on your site
Database contents may be exposed; site availability may be degraded if the plugin is actively exploited.
Conditions required to exploit
Attacker must have high-level administrative or editor privileges on the site.
Key dates
External resources
Related vulnerabilities
