CVE-2023-52142
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Cool Plugins Events Shortcodes For The Events Calendar.This issue affects Events Shortcodes For The Events Calendar: from n/a through 2.3.1.
- Score
- CVSS 3.1 8.8 High
- Status
- Modified - audit@patchstack.com
- Published
- 2024-01-08
- Last modified
- 2026-04-28
- Weaknesses
- CWE-89
Affected products
- Events Shortcodes For The Events Calendar (Cool Plugins)
- Events Shortcodes For The Events Calendar (Coolplugins)
References
- https://patchstack.com/database/vulnerability/template-events-calendar/wordpress-events-shortcodes-for-the-events-calen…