Description
Magento versions 2.3.3 and earlier, 2.2.10 and earlier, 1.14.4.3 and earlier, and 1.9.4.3 and earlier have an sql injection vulnerability. Successful exploitation could lead to sensitive information disclosure.
Remediation
References
Related Vulnerabilities
WordPress Plugin Comments-wpDiscuz SQL Injection (5.3.5)
WordPress 5.4.x Multiple Vulnerabilities (5.4 - 5.4.1)
Drupal Other Vulnerability (CVE-2006-2742)
WordPress Plugin Stock market charts from finviz Cross-Site Scripting (1.0)
Squid Missing Release of Memory after Effective Lifetime Vulnerability (CVE-2021-28652)