Non notée
CVE-2022-3141 The Translate Multilingual sites WordPress plugin before 2.3.3 is vulnerable to an authenticated SQL injection
Description
The Translate Multilingual sites WordPress plugin before 2.3.3 is vulnerable to an authenticated SQL injection. By adding a new language (via the settings page) containing specific special characters, the backticks in the SQL query can be surpassed and a time-based blind payload can be injected.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Translate Multilingual sites – TranslatePress 2.3 | premières → < 2.3.3 | 2.3.3 |