CVE-2023-54359 | Adivaha WordPress adivaha Travel Plugin 2.3 GET Parameter /mobile-app/v3/ pid sql injection (Exploit 51655 / EDB-51655)

A vulnerability categorized as critical has been discovered in Adivaha WordPress adivaha Travel Plugin 2.3. This vulnerability affects unknown code of the file /mobile-app/v3/ of the component GET Parameter Handler. The manipulation of the argument pid results in sql injection.

This vulnerability is known as CVE-2023-54359. It is possible to launch the attack remotely. Furthermore, an exploit is available.