CVE-2023-39309

Fusion Builder before version 3.11.2 contains a SQL injection vulnerability affecting an unspecified parameter. The flaw results from improper escaping of user input and inadequate query parameterization in the plugin's database operations. Authenticated users with subscriber privileges or higher can exploit this to inject malicious SQL commands and retrieve sensitive data from the database.

Based on public CVE data (MITRE/NVD).