CVE-2023-36529

State: PUBLISHED · Published: 2023-11-03 · Updated: 2025-02-19 · Assigner: Patchstack

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Favethemes Houzez - Real Estate WordPress Theme allows SQL Injection.This issue affects Houzez - Real Estate WordPress Theme: from n/a through 1.3.4.

CWE

CWE-89 — CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Affected

Favethemes / Houzez - Real Estate WordPress Theme — v=n/a ≤1.3.4 [affected]

CVSS

(none)

References

https://patchstack.com/database/vulnerability/houzez-crm/wordpress-houzez-crm-plugin-1-3-3-sql-injection?_s_id=cve vdb-entry

Source

cvelistV5-main/cves/2023/36xxx/CVE-2023-36529.json