Aller au contenu
Se connecter
7.2 Élevée

CVE-2022-3689 The HTML Forms WordPress plugin before 1.3.25 does not properly properly escape a parameter before using it in a SQL…

Description

The HTML Forms WordPress plugin before 1.3.25 does not properly properly escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users

Produits et versions touchés

Produit Versions touchées Corrigé en
HTML Forms 1.3 premières → < 1.3.25 1.3.25

Autres CVE de HTML Forms

Les 3 CVE de HTML Forms →
CVE-2024-6412 The HTML Forms WordPress plugin before 1.3.34 does not have CSRF checks in some places, which could allow attackers… 6.5 Moyenne CVE-2024-6243 The HTML Forms WordPress plugin before 1.3.33 does not sanitize and escape the form message inputs, allowing… 5.9 Moyenne
Suivre cette CVE