CVE-2024-30491

Severity

HIGH

CVSS

8.5

EPSS

0.32049

Risk score

45.22

CISA KEV

PoC

Published

2024-03-29

Modified

2026-04-28

First seen

2026-08-07

Aliases

EUVD-2024-28411, GHSA-4PV2-2786-VQXJ

Products

Metagauss:ProfileGrid n/a ≤5.7.8

Sources

euvd EUVD-2024-28411

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Metagauss ProfileGrid.This issue affects ProfileGrid : from n/a through 5.7.8.

References

https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-28411
https://patchstack.com/database/vulnerability/profilegrid-user-profiles-groups-and-communities/wordpress-profilegrid-user-profiles-memberships-groups-and-communities-plugin-5-7-8-sql-injection-vulnerability?_s_id=cve