← Database

CVE-2023-2114

HIGH CVSS: 7.2 Published: 2023-05-08 Modified: 2026-06-17

Description

The NEX-Forms WordPress plugin before 8.4 does not properly escape the `table` parameter, which is populated with user input, before concatenating it to an SQL query.

Affected Platforms

Basixonline Nex-Forms

Weakness Type

CWE-89

References