CVE-2023-46823

HighCVSS 7.2/10Last modified Jun 17, 2026

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Avirtum ImageLinks Interactive Image Builder for WordPress allows SQL Injection.This issue affects ImageLinks Interactive Image Builder for WordPress: from n/a through 1.5.4.

Metrics

CVSS 3.1 7.2/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

No affected versions have been published.

Timeline

Published: Nov 6, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-468244.8Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Om Ak Solutions Slick Popup: Contact Form 7 Popup Plugin plugin <= 1.7.14 CVE-2023-46835.5NULL Pointer Dereference in GitHub repository gpac/gpac prior to 2.3-DEV.CVE-2023-468355.5The current setup of the quarantine page tables assumes that the quarantine domain (dom_io) has been initialized with an address width of DE CVE-2023-468364.7The fixes for XSA-422 (Branch Type Confusion) and XSA-434 (Speculative Return Stack Overflow) are not IRQ-safe. It was believed that the mi CVE-2023-468373.3Arm provides multiple helpers to clean & invalidate the cache for a given region. This is, for instance, used when allocating guest memory CVE-2023-468387.5Transmit requests in Xen's virtual network protocol can consist of multiple parts. While not really useful, except for the initial part any CVE-2023-468395.3PCI devices can make use of a functionality called phantom functions, that when enabled allows the device to generate requests using the IDs CVE-2023-468404.1Incorrect placement of a preprocessor directive in source code results in logic that doesn't operate as intended when support for HVM guests CVE-2023-468416.5Recent x86 CPUs offer functionality named Control-flow Enforcement Technology (CET). A sub-feature of this are Shadow Stacks (CET-SS). CET-CVE-2023-468426.5Unlike 32-bit PV guests, HVM guests may switch freely between 64-bit and other modes. This in particular means that they may set registers CVE-2023-468457.2EC-CUBE 3 series (3.0.0 to 3.0.18-p6) and 4 series (4.0.0 to 4.0.6-p3, 4.1.0 to 4.1.2-p2, and 4.2.0 to 4.2.2) contain an arbitrary code exec CVE-2023-468465.3SQUID is vulnerable to HTTP request smuggling, caused by chunked decoder lenience, allows a remote attacker to perform Request/Response smug