CVE-2023-6373 – ArtPlacer Widget < 2.20.7 - Editor+ SQLi

https://notcve.org/view.php?id=CVE-2023-6373

The ArtPlacer Widget WordPress plugin before 2.20.7 does not sanitize and escape the "id" parameter before submitting the query, leading to a SQLI exploitable by editors and above. Note: Due to the lack of CSRF check, the issue could also be exploited via a CSRF against a logged editor (or above) El complemento ArtPlacer Widget de WordPress anterior a 2.20.7 no sanitiza ni escapa del parámetro "id" antes de enviar la consulta, lo que genera un SQLI explotable por los editores y superiores. Nota: Debido a la falta de verificación CSRF, el problema también podría explotarse a través de un CSRF contra un editor registrado (o superior) The ArtPlacer Widget plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter in versions up to, and including, 2.20.6 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with editor-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. • https://wpscan.com/vulnerability/afc11c92-a7c5-4e55-8f34-f2235438bd1b • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •