Aller au contenu
Se connecter
Non notée

CVE-2022-0434 The Page View Count WordPress plugin before 2.4.15 does not sanitise and escape the post_ids parameter before using it…

Description

The Page View Count WordPress plugin before 2.4.15 does not sanitise and escape the post_ids parameter before using it in a SQL statement via a REST endpoint, available to both unauthenticated and authenticated users. As a result, unauthenticated attackers could perform SQL injection attacks

Produits et versions touchés

Produit Versions touchées Corrigé en
Page View Count 2.4 premières → < 2.4.15 2.4.15

Autres CVE de Page View Count

Les 3 CVE de Page View Count →
CVE-2023-0095 The Page View Count WordPress plugin before 2.6.1 does not validate and escape some of its block options before… 5.4 Moyenne CVE-2021-24509 The Page View Count WordPress plugin before 2.4.9 does not escape the postid parameter of pvc_stats shortcode,… Non notée
Suivre cette CVE