7.2
Élevée
CVE-2022-3764 The plugin does not filter the "delete_entries" parameter from user requests, leading to an SQL Injection vulnerability
Description
The plugin does not filter the "delete_entries" parameter from user requests, leading to an SQL Injection vulnerability.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Form Vibes 1.4 | premières → < 1.4.6 | 1.4.6 |