CVE-2022-1689
N/A
N/A
Summary
The Note Press WordPress plugin through 0.1.10 does not sanitise and escape the Update parameter before using it in a SQL statement when updating a note via the admin dashboard, leading to an SQL injection
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Unknown | Note Press | 0.1.10 <= 0.1.10 | affected |
Weaknesses
- CWE-89: CWE-89 SQL Injection
ADP Enrichment
CVE Program Container
Additional References
- https://wpscan.com/vulnerability/982f84a1-216d-41ed-87bd-433b695cec28
- https://bulletin.iese.de/post/note-press_0-1-10_2
References
- https://wpscan.com/vulnerability/982f84a1-216d-41ed-87bd-433b695cec28
- https://bulletin.iese.de/post/note-press_0-1-10_2
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.