VULNERABILITY INTELLIGENCE

CVE-2014-5185

CVSS score6 MEDIUM
EPSS probability1.94%
CISA KEVNot currently listed
Published2014-08-06
Last modified2026-06-17
CVSS vectorAV:N/AC:M/Au:S/C:P/I:P/A:P

Description

SQL injection vulnerability in the Quartz plugin 1.01.1 for WordPress allows remote authenticated users with Contributor privileges to execute arbitrary SQL commands via the quote parameter in an edit action in the quartz/quote_form.php page to wp-admin/edit.php.

Weakness classification

  • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Primary references