CVE-2023-5082 (published 2023-11-06T20:40:37.134Z)
The History Log by click5 WordPress plugin before 1.0.13 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by admin users when using the Smash Balloon Social Photo Feed plugin alongside it.
Affected products: Vendor: Unknown
Product: History Log by click5
Versions: 0