CVE-2023-47852
CVSS 3.1 Score 7.2 of 10 (high)
Details
Published Dec 20, 2023
Updated: Dec 22, 2023
CWE ID 89
Summary
CVE-2023-47852 is an SQL injection vulnerability affecting Link Whisper Free, a link building tool. The flaw stems from improper handling of special elements in SQL commands, potentially allowing unauthorized users to execute malicious queries and gain unauthorized access to sensitive data. Affected versions of Link Whisper Free range from n/a to 0.6.5. Users are strongly urged to update their software to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share