CVE-2017-1002023

9.8 criticalEPSS 3.0%

Critical (9.8) in daisythemes easy team manager. EPSS 3.0% chance of exploitation in the next 30 days.

Vulnerability in wordpress plugin Easy Team Manager v1.3.2, The code does not sanitize id before making it part of an SQL statement in file ./easy-team-manager/inc/easy_team_manager_desc_edit.php

Severity

CVSS 3.0

9.8 critical

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 3.0% chance of exploitation in the next 30 days; higher than 87% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2017-09-14
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

daisythemes:easy_team_manager

References

http://www.vapidlabs.com/advisory.php?v=194
https://wordpress.org/plugins/easy-team-manager/
http://www.vapidlabs.com/advisory.php?v=194
https://wordpress.org/plugins/easy-team-manager/

Check your stack JSON