CVSS base score
What the vulnerability does
The Custom css-js-php WordPress plugin through 2.0.7 does not properly sanitize user input before using it in a SQL query, and the result is passed to eval(), allowing unauthenticated users to execute arbitrary PHP code on the server.
Explanation of Vulnerability in Simple Terms
A vulnerability exists in Custom css-js-php version 2.0.7. Due to missing security metadata, the specific attack vector and impact cannot be determined from available information. Site administrators should contact the vendor for details and apply updates when available.
What an attacker can do
Unknown; insufficient technical data provided.
Potential impact on your site
Unknown impact; vendor and patch status unclear.
Conditions required to exploit
Unknown; insufficient technical data provided.
Key dates
External resources
