CVE-2022-1690
N/A
N/A
Summary
The Note Press WordPress plugin through 0.1.10 does not sanitise and escape the ids from the bulk actions before using them in a SQL statement in an admin page, leading to an SQL injection
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Unknown | Note Press | 0.1.10 <= 0.1.10 | affected |
Weaknesses
- CWE-89: CWE-89 SQL Injection
ADP Enrichment
CVE Program Container
Additional References
- https://wpscan.com/vulnerability/54e16f0a-667c-44ea-98ad-0306c4a35d9d
- https://bulletin.iese.de/post/note-press_0-1-10_3
References
- https://wpscan.com/vulnerability/54e16f0a-667c-44ea-98ad-0306c4a35d9d
- https://bulletin.iese.de/post/note-press_0-1-10_3
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.