Skip to content
OpenAdvisories

Vendor

salesmanag0

1 known vulnerabilities.

Products

SALESmanago & Leadoo 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2023-4939

    SALESmanago <= 3.2.4 - Log Injection via Weak Authentication Token

    The SALESmanago plugin for WordPress is vulnerable to Log Injection in versions up to, and including, 3.2.4. This is due to the use of a weak authentication token for the /wp-json/salesmanago/v1/callbackApiV3 API endpoint which is simply a SHA1 hash of the si…

    salesmanag0 SALESmanago & Leadoo Web / CMS