CVE-2019-14348

PoC —

CVSS 3.0

9.8 critical

EPSS

21%p97

Published

Aug 5, 2019 (Aug 5, 2019)

Modified

Jun 17, 2026

Description

The BearDev JoomSport plugin 3.3 for WordPress allows SQL injection to steal, modify, or delete database information via the joomsport_season/new-yorkers/?action=playerlist sid parameter.

Vendors: beardev
Products: joomsport
Ecosystems: WordPress
Weakness: CWE-89
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (20.5%)

In the news0 stories

No ingested article mentions this CVE yet.