8.8
Élevée
CVE-2022-3494 The Complianz WordPress plugin before 6.3.4, and Complianz Premium WordPress plugin before 6.3.6 allow a translators…
Description
The Complianz WordPress plugin before 6.3.4, and Complianz Premium WordPress plugin before 6.3.6 allow a translators to inject arbitrary SQL through an unsanitized translation. SQL can be injected through an infected translation file, or by a user with a translator role through translation plugins such as Loco Translate or WPML.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Complianz – GDPR/CCPA Cookie Consent 6.3 | premières → < 6.3.4 | 6.3.4 |
| Complianz Premium 6.3 | premières → < 6.3.6 | 6.3.6 |