Critical severity9.8NVD Advisory· Published Sep 28, 2023· Updated Jun 17, 2026
CVE-2023-38870
CVE-2023-38870
Description
A SQL injection vulnerability exists in gugoan Economizzer commit 3730880 (April 2023) and v.0.9-beta1. The cash book has a feature to list accomplishments by category, and the 'category_id' parameter is vulnerable to SQL Injection.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:economizzer:economizzer:0.9:beta1:*:*:*:wordpress:*:*+ 1 more
- cpe:2.3:a:economizzer:economizzer:0.9:beta1:*:*:*:wordpress:*:*
- cpe:2.3:a:economizzer:economizzer:april_2023:*:*:*:*:wordpress:*:*
- Range: commit 3730880 (April 2023) and v.0.9-beta1
Patches
Vulnerability mechanics
References
2- github.com/dub-flow/vulnerability-research/tree/main/CVE-2023-38870nvdExploitThird Party Advisory
- www.economizzer.orgnvdProduct
News mentions
0No linked articles in our index yet.