Active SQL Injection Vulnerability
komir
Hello,
I use mysites.guru to maintain my websites, and I have just received a critical security warning regarding SP Page Builder v6.7.1.
According to the security alert, version 6.7.1 contains an active, unauthenticated SQL injection vulnerability in the front-end article loading endpoint (articles.loadMoreArticles), which is reportedly being actively exploited in the wild.
Could you please provide an estimated timeframe for when version or patch will be officially released and available for download?
Thank you for your prompt response regarding this critical issue.
Best regards
Paul Frankowski
Accepted AnswerYes, it should be today, I hope very soon.
If somebody needs fixed file (sooner) I put inside "Hidden Content" , look below
Easy Connect 83
Accepted AnswerHello, I’m in the same situation. I also use the MySites.guru service.
I reported it to them yesterday.
They replied saying they would offer an update this morning...