Not rated
CVE-2022-1023 The Podcast Importer SecondLine WordPress plugin before 1.3.8 does not sanitise and properly escape some imported…
Description
The Podcast Importer SecondLine WordPress plugin before 1.3.8 does not sanitise and properly escape some imported data, which could allow SQL injection attacks to be performed by imported a malicious podcast file
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Podcast Importer SecondLine 1.3 | earliest → < 1.3.8 | 1.3.8 |