Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:fecommunity:reactpress:*:*:*:*:*:*:*:*

1 brief RSS
high advisory

SQL Injection in ReactPress API via Unsanitized Query Parameter Names

An unauthenticated SQL injection vulnerability in ReactPress allows attackers to exfiltrate database contents via malicious HTTP query parameter keys in API requests.

reactpress sqli vulnerability api-security
1r 1t 1c