8.8
Élevée
CVE-2022-3860 The Visual Email Designer for WooCommerce WordPress plugin before 1.7.2 does not properly sanitise and escape a…
Description
The Visual Email Designer for WooCommerce WordPress plugin before 1.7.2 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by users with a role as low as author.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Visual Email Designer for WooCommerce 1.7 | premières → < 1.7.2 | 1.7.2 |