9.8
Critique
CVE-2022-3241 The Build App Online WordPress plugin before 1.0.19 does not properly sanitise and escape some parameters before using…
Description
The Build App Online WordPress plugin before 1.0.19 does not properly sanitise and escape some parameters before using them in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Build App Online 1.0 | premières → < 1.0.19 | 1.0.19 |