CVE-2023-45830
Last modified
CVE-2023-45830 is a critical-severity vulnerability rated 9.8/10 on the CVSS scale. Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Online ADA Accessibility Suite by Online ADA allows SQL Injection.This issue affects Accessibility Suite by Online ADA: from n/a through 4.12.. EPSS estimates a 0.55% chance of exploitation in the next 30 days.
Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Online ADA Accessibility Suite by Online ADA allows SQL Injection.This issue affects Accessibility Suite by Online ADA: from n/a through 4.12.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Adaplugin | Accessibility Suite By Online Ada | <= 4.11 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2023-45830?
How severe is CVE-2023-45830?
How do I fix CVE-2023-45830?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2023
- CVE-2023-45825ydb-go-sdk is a pure Go native and database/sql driver for t…5.5
- CVE-2023-45826Leantime is an open source project management system. A 'use…6.5
- CVE-2023-45827Dot diver is a lightweight, powerful, and dependency-free Ty…9.8
- CVE-2023-45828Missing Authorization vulnerability in RumbleTalk RumbleTalk…5.4
- CVE-2023-45829Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulne…5.4
- CVE-2023-4583When checking if the Browsing Context had been discarded in …7.5
- CVE-2023-45831Cross-Site Request Forgery (CSRF) vulnerability in Pixelativ…8.8
- CVE-2023-45832Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerabili…4.8
- CVE-2023-45833Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerabili…4.8
- CVE-2023-45834Exposure of Sensitive Information to an Unauthorized Actor v…5.3
- CVE-2023-45835Unauth. Reflected Cross-Site Scripting (XSS) vulnerability i…6.1
- CVE-2023-45836Cross-Site Request Forgery (CSRF) vulnerability in XYDAC Ult…8.8
Are you affected by CVE-2023-45830?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST