Cashtomer Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Cashtomer Project records in CISA KEV

No Cashtomer Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Cashtomer 1 record MEDIUM

Records

1 record

TI-2021-06683 CVE-2021-24391 · GHSA-q9qw-rwr9-q48r

Cashtomer <= 1.0.0 - Authenticated SQL Injection

MEDIUM 41

An editid GET parameter of the Cashtomer WordPress plugin through 1.0.0 is not properly sanitised, escaped or validated before inserting to a SQL statement, leading to SQL injection.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01568 Published 2021-09-06 No fix listed CWE-89

Open these records in search →

Critical	0
High	1
Medium	0
Low	0
No CVSS	0