CVE-2023-36508 (published 2023-10-31T14:23:21.313Z)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in BestWebSoft Contact Form to DB by BestWebSoft – Messages Database Plugin For WordPress contact-form-to-db allows SQL Injection.This issue affects Contact Form to DB by BestWebSoft – Messages Database Plugin For WordPress: from n/a through 1.7.1.


Affected products: Vendor: BestWebSoft
Product: Contact Form to DB by BestWebSoft – Messages Database Plugin For WordPress
Versions: n/a