Non notée
CVE-2022-1685 The Five Minute Webshop WordPress plugin through 1.3.2 does not properly validate and sanitise the orderby parameter…
Description
The Five Minute Webshop WordPress plugin through 1.3.2 does not properly validate and sanitise the orderby parameter before using it in a SQL statement via the Manage Products admin page, leading to an SQL Injection
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Five Minute Webshop | 1.3.2 | Pas de correctif indiqué |