Skip to content
Sign in
9.8 Critical

CVE-2022-4099 The Joy Of Text Lite WordPress plugin before 2.3.1 does not properly sanitise and escape some parameters before using…

Description

The Joy Of Text Lite WordPress plugin before 2.3.1 does not properly sanitise and escape some parameters before using them in SQL statements accessible to unauthenticated users, leading to unauthenticated SQL injection

Affected products and versions

Product Affected versions Fixed in
Joy Of Text Lite 2.3 earliest → < 2.3.1 2.3.1

Other CVEs of Joy Of Text Lite

The 2 CVEs of Joy Of Text Lite →
CVE-2024-7984 The Joy Of Text Lite WordPress plugin through 2.3.1 does not have CSRF check in place when updating its settings, which… 4.3 Medium
Track this CVE