CVE-2023-28663 — Vulnerability intelligence

formidablepro2pdf — formidable pro2pdf

Published: 2023-03-22T21:15:18.967

CVSS

8.8

CISA KEV

Not listed; not proof of no exploitation

Original source text (not a translation)

The Formidable PRO2PDF WordPress Plugin, version < 3.11, is affected by an authenticated SQL injection vulnerability in the ‘fieldmap’ parameter in the fpropdf_export_file action.

Sources

• CVE-2023-28663
• Exploit, Third Party Advisory