PT-2022-13429
CVE-2022-0773
·
تاريخ النشر
2022-05-02
·
تاريخ التحديث
2022-05-09
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Documentor WordPress plugin versions 1.5.3 and earlier
Description
The issue arises from the failure to sanitize and escape user input before it is interpolated in an SQL statement and then executed, leading to an SQL Injection that can be exploited by unauthenticated users.
Recommendations
For Documentor WordPress plugin versions 1.5.3 and earlier, update to a version that addresses this issue, as the current version is exploitable to SQL Injection attacks.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
قابلية الاستغلال
استغلال
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾