CVE-2023-2482: Responsive CSS EDITOR <= 1.0 - Admin+ SQLi

0.0 CVSS

Description

The Responsive CSS EDITOR WordPress plugin through 1.0 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high-privilege users such as admin.

Classification

CVE ID: CVE-2023-2482

CVSS Base Severity: LOW

CVSS Base Score: 0.0

Affected Products

Vendor: Unknown

Product: Responsive CSS EDITOR

Exploit Prediction Scoring System (EPSS)

EPSS Score: 0.1% (probability of being exploited)

EPSS Percentile: 44.2% (scored less or equal to compared to others)

EPSS Date: 2025-02-03 (when was this score calculated)

References

https://wpscan.com/vulnerability/c0f73781-be7e-482e-91de-ad7991ad4bd5

Timeline