Unscored CVE-2014-5185 EUVD-2014-5083GHSA-h8cw-cr7m-9wjw

SQL injection vulnerability in the Quartz plugin 1.01.1 for WordPress allows remote authenticated users with Contributor privileges to exec…

Published Aug 6, 2014 · Updated Sep 16, 2024 · Assigned by mitre

Description

SQL injection vulnerability in the Quartz plugin 1.01.1 for WordPress allows remote authenticated users with Contributor privileges to execute arbitrary SQL commands via the quote parameter in an edit action in the quartz/quote_form.php page to wp-admin/edit.php.

References

http://codevigilant.com/disclosure/wp-plugin-quartz-a1-injection