CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L
What the vulnerability does
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in smartcms Advance Seat Reservation Management for WooCommerce scw-seat-reservation allows SQL Injection.This issue affects Advance Seat Reservation Management for WooCommerce: from n/a through <= 3.1.
Explanation of Vulnerability in Simple Terms
A SQL injection vulnerability in Advance Seat Reservation Management for WooCommerce versions 3.1 and earlier allows unauthenticated attackers to read sensitive database information without user interaction. The vulnerability exists in how the plugin processes user input in database queries. Attackers can extract customer data, payment information, and other stored records. Update to a version newer than 3.1 immediately.
What an attacker can do
Read sensitive data from your site's database, including customer records and payment information.
Potential impact on your site
Customer data, payment records, and other database contents can be exposed to attackers.
Conditions required to exploit
Network access only; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
