CrocoBlock JetSearch SQL Injection Vulnerability

A blind SQL injection vulnerability has been identified in the CrocoBlock JetSearch plugin, specifically in versions through 3.5.10. This vulnerability arises from improper neutralization of special elements used in SQL commands, allowing for exploitation by manipulating SQL queries.

Impact

Exploitation of this vulnerability allows for blind SQL injection, where an attacker can interfere with the database queries made by the application. This could lead to unauthorized data access or manipulation, depending on the application's database permissions.