CVE-2020-8242

Published: 2022-02-18T18:15Z

Last Modified: 2024-11-21T05:38Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

Unsanitized user input in ExpressionEngine <= 5.4.0 control panel member creation leads to an SQL injection. The user needs member creation/admin control panel access to execute the attack. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt