9.8
Critical
CVE-2022-3241 The Build App Online WordPress plugin before 1.0.19 does not properly sanitise and escape some parameters before using…
Description
The Build App Online WordPress plugin before 1.0.19 does not properly sanitise and escape some parameters before using them in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Build App Online 1.0 | earliest → < 1.0.19 | 1.0.19 |