CVE-2023-5082: CLICK5INTERACTIVE Sitemap By CLICK5

High severity, CVSS 7.2. EPSS: 0.7% chance of exploitation in the next 30 days.

The History Log by click5 WordPress plugin before 1.0.13 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by admin users when using the Smash Balloon Social Photo Feed plugin alongside it.

Affected products

• CLICK5INTERACTIVE Sitemap By CLICK5: before 1.0.13 (fixed in 1.0.13)

Published 2023-11-06. Last modified 2026-06-17.