← Database

CVE-2024-9828

MEDIUM CVSS: 4.1 Published: 2024-11-21 Modified: 2026-06-17

Description

The Taskbuilder WordPress plugin before 3.0.5 does not sanitize user input into the 'load_orders' parameter and uses it in a SQL statement, allowing high privilege users such as admin to perform SQL Injection attacks

Affected Platforms

Taskbuilder Taskbuilder

Weakness Type

CWE-89, CWE-89

References