CyberRota Analysis
AI-GeneratedThe vulnerability allows low-privileged backend users to perform SQL injection attacks via unsanitized user input in the "Forms Export" backend module. This can lead to unauthorized access to sensitive data within the database, posing significant risks to data integrity and confidentiality. Organizations utilizing this backend module should prioritize patching to mitigate potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
The extension fails to properly sanitize user input before using it in a database query. As a result, a low-privileged backend user can inject arbitrary SQL through a URL parameter within the "Forms Export" backend module. Exploitation requires a low-privileged backend user and read access to the "Forms Export" Backend module.