Skip to content
Not rated

CVE-2022-1023 The Podcast Importer SecondLine WordPress plugin before 1.3.8 does not sanitise and properly escape some imported…

Description

The Podcast Importer SecondLine WordPress plugin before 1.3.8 does not sanitise and properly escape some imported data, which could allow SQL injection attacks to be performed by imported a malicious podcast file

Affected products and versions

Product Affected versions Fixed in
Podcast Importer SecondLine 1.3 earliest → < 1.3.8 1.3.8
Track this CVE