Skip to content
Threat Feed

Vendor

Supsystic

4 briefs RSS
high advisory

Supsystic Digital Publications Path Traversal and Stored XSS Vulnerability (CVE-2020-37245)

Supsystic Digital Publications 1.6.9 contains a path traversal vulnerability in the Folder input field, allowing attackers to access sensitive files, and a stored XSS vulnerability due to improper input sanitization, leading to arbitrary script execution in the context of affected users (CVE-2020-37245).

Digital Publications by Supsystic 1.6.9 path-traversal xss wordpress plugin
2r 1t 1c
high advisory

CVE-2020-37244: Supsystic Membership 1.4.7 Unauthenticated SQL Injection Vulnerability

Supsystic Membership version 1.4.7 is vulnerable to SQL injection (CVE-2020-37244), allowing unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the 'search' and 'sidx' parameters, potentially extracting sensitive database information.

Membership 1.4.7 sqli cve-2020-37244 wordpress unauthenticated
2r 1t 1c
critical threat

Supsystic Pricing Table Plugin <= 1.8.7 SQL Injection Vulnerability (CVE-2020-37243)

Supsystic Pricing Table plugin version 1.8.7 contains an SQL injection vulnerability via the 'sidx' GET parameter, enabling unauthenticated attackers to execute arbitrary SQL queries through the getListForTbl action, as well as stored XSS vulnerabilities.

Pricing Table sql-injection xss wordpress plugin
2r 1t 1c
high advisory

Supsystic Ultimate Maps SQL Injection Vulnerability (CVE-2020-37242)

Supsystic Ultimate Maps 1.1.12 is vulnerable to SQL injection via the 'sidx' GET parameter, allowing unauthenticated attackers to execute arbitrary SQL queries and extract sensitive database information.

Ultimate Maps cve-2020-37242 sql-injection wordpress
1r 1t 1c