JoomSport <= 5.7.11 - Authenticated (Contributor+) SQL Injection via 'team_id' Shortcode Attribute
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
- Exploitation: none
- Automatable: no
- Technical impact: partial
Summary
The JoomSport plugin for WordPress, a sports team and league management tool, is affected by a SQL injection flaw in its shortcode handling. An attacker with contributor-level access or higher could exploit this to extract sensitive data from the site's database.
Summarized by anthropic/claude-haiku-5.5. Verify details against the original sources.
Read the original description
The JoomSport – for Sports: Team & League, Football, Hockey & more plugin for WordPress is vulnerable to generic SQL Injection via the 'team_id' parameter in all versions up to, and including, 5.7.11 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with contributor-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. The vulnerable code path is reached when the season has no associated joomsport_tournament term, which is the default state for newly created seasons.
Timeline
- CVE published
- First seen by cve.now
- CISA SSVC assessment
Exploitation: none · Automatable: no · Technical impact: partial
- Record last updated
Affected versions
- beardev JoomSport – for Sports: Team & League, Football, Hockey & more
through 5.7.11
References 7
plugins.trac.wordpress.org
- browser/joomsport-sports-league-results-management/tags/5.7.11/sportleague/base/wordpress/classes/class-jsport-getplayers.php#L136
- browser/joomsport-sports-league-results-management/tags/5.7.11/includes/joomsport-shortcodes.php#L485
- browser/joomsport-sports-league-results-management/tags/5.7.11/sportleague/classes/objects/class-jsport-team.php#L39
- browser/joomsport-sports-league-results-management/tags/5.7.11/sportleague/classes/objects/class-jsport-team.php#L280
- changeset/3770486
- changeset/3770486/joomsport-sports-league-results-management/trunk/sportleague/base/wordpress/classes/class-jsport-getplayers.php