critical9.8
CVE-2024-6809
The Simple Video Directory WordPress plugin before 1.4.3 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX actio…
Impact
The Simple Video Directory WordPress plugin before 1.4.3 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Quantumcloud | Simple Video Directory | before 1.4.3 |