{"id":85930,"date":"2025-12-01T00:40:02","date_gmt":"2025-12-01T00:40:02","guid":{"rendered":""},"modified":"-0001-11-30T00:00:00","modified_gmt":"-0001-11-30T06:00:00","slug":"cve-2023-52142-sql-injection-vulnerability-in-cool-plugins-events-shortcodes-for-the-events-calendar","status":"publish","type":"post","link":"https:\/\/www.ameeba.com\/blog\/cve-2023-52142-sql-injection-vulnerability-in-cool-plugins-events-shortcodes-for-the-events-calendar\/","title":{"rendered":"CVE-2023-52142: SQL Injection Vulnerability in Cool Plugins Events Shortcodes for the Events Calendar<\/strong>"},"content":{"rendered":"

Overview<\/strong><\/p>\n

A concerning vulnerability, CVE-2023-52142, has been discovered in the Cool Plugins Events Shortcodes for the Events Calendar. This vulnerability arises from the improper neutralization of special elements used in an SQL command, more commonly known as SQL Injection vulnerability. This flaw impacts all users of this plugin, and it poses a serious threat due to the potential system compromise or data leakage.<\/p>\n

Vulnerability Summary<\/strong><\/p>\n

CVE ID: CVE-2023-52142
\nSeverity: High (CVSS: 7.6)
\nAttack Vector: Network
\nPrivileges Required: None
\nUser Interaction: None
\nImpact: Successful exploitation could lead to unauthorized read\/write access to the database, potentially resulting in a system compromise or data leakage.<\/p>\n

Affected Products<\/strong><\/p>

\r\n

\r\n \r\n \"Ameeba\r\n <\/a>\r\n A new way to communicate\r\n <\/h2>\r\n\r\n

\r\n Ameeba Chat is built on encrypted identity, not personal profiles.\r\n <\/p>\r\n\r\n

\r\n Message, call, share files, and coordinate with identities kept separate.\r\n <\/p>\r\n\r\n