Aller au contenu
Se connecter
8.8 Élevée

CVE-2022-3981 The Icegram Express WordPress plugin before 5.5.1 does not properly sanitise and escape a parameter before using it in a…

Description

The Icegram Express WordPress plugin before 5.5.1 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by any authenticated users, such as subscriber

Produits et versions touchés

Produit Versions touchées Corrigé en
Icegram Express 5.5 premières → < 5.5.1 5.5.1

Autres CVE de Icegram Express

Les 3 CVE de Icegram Express →
CVE-2025-15692 The Icegram Express WordPress plugin before 5.8.6 does not properly escape a list description setting before… 3.5 Faible CVE-2025-0671 The Icegram Express WordPress plugin before 5.7.50 does not sanitise and escape some of its Template settings, which… 6.1 Moyenne
Suivre cette CVE