CVE-2022-4383

Name of the Vulnerable Software and Affected Versions CBX Petition for WordPress plugin versions 1.0.3 and earlier

Description The issue arises from the plugin's failure to properly sanitize and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection.

Recommendations For CBX Petition for WordPress plugin versions 1.0.3 and earlier, update to a version that properly sanitizes and escapes parameters used in SQL statements to prevent SQL injection. As a temporary workaround, consider restricting access to the AJAX action to authenticated users only until a patch is available.