exploitDog

CVE-2022-4370

Опубликовано: 02 янв. 2023

Источник: nvd

CVSS3: 7.2

EPSS Низкий

Описание

The multimedial images WordPress plugin through 1.0b does not properly sanitize and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by users with a role as low as Admin.

Ссылки

https://bulletin.iese.de/post/multimedial-images_1-0b
Exploit
Third Party Advisory
https://wpscan.com/vulnerability/cf336783-9959-413d-a5d7-73c7087426d8
Exploit
Third Party Advisory
https://bulletin.iese.de/post/multimedial-images_1-0b
Exploit
Third Party Advisory
https://wpscan.com/vulnerability/cf336783-9959-413d-a5d7-73c7087426d8
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:multimedial_images_project:multimedial_images:*:*:*:*:*:wordpress:*:*

Версия до 1.0b (включая)

EPSS

Процентиль: 67%

0.00537

Низкий

7.2 High

CVSS3

Дефекты

Связанные уязвимости

GHSA-j5wj-8g6x-76rp

CVSS3: 7.2

github

около 3 лет назад

The multimedial images WordPress plugin through 1.0b does not properly sanitize and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by users with a role as low as Admin.

EPSS

Процентиль: 67%

0.00537

Низкий

7.2 High

CVSS3

Дефекты