CVE-2024-54261

Severity

CRITICAL

CVSS

10.0

EPSS

0.00639

Risk score

40.22

CISA KEV

PoC

Published

2024-12-13

Modified

2026-04-28

First seen

2026-08-07

Aliases

EUVD-2024-52387, GHSA-37GX-37XG-963J

Products

Unknown:TAX SERVICE Electronic HDM 0 ≤1.2.2

Sources

euvd EUVD-2024-52387

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in HK Digital Agency LLC TAX SERVICE Electronic HDM virtual-hdm-for-taxservice-am allows SQL Injection.This issue affects TAX SERVICE Electronic HDM: from n/a through <= 1.2.2.

References

https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-52387
https://patchstack.com/database/Wordpress/Plugin/virtual-hdm-for-taxservice-am/vulnerability/wordpress-tax-service-electronic-hdm-plugin-1-1-2-sql-injection-vulnerability?_s_id=cve