critical9.8
CVE-2023-23757
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability allows SQL Injection.
Impact
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability allows SQL Injection.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Bestaddon | Bestaddon Gallery | from 1.0.0 through 1.2.0 |