Логотип exploitDog
bind:CVE-2022-3494
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2022-3494

Количество 2

Количество 2

nvd логотип

CVE-2022-3494

больше 3 лет назад

The Complianz WordPress plugin before 6.3.4, and Complianz Premium WordPress plugin before 6.3.6 allow a translators to inject arbitrary SQL through an unsanitized translation. SQL can be injected through an infected translation file, or by a user with a translator role through translation plugins such as Loco Translate or WPML.

CVSS3: 8.8
EPSS: Низкий
github логотип

GHSA-49q7-gc3f-7wp4

больше 3 лет назад

The Complianz WordPress plugin before 6.3.4, and Complianz Premium WordPress plugin before 6.3.6 allow a translators to inject arbitrary SQL through an unsanitized translation. SQL can be injected through an infected translation file, or by a user with a translator role through translation plugins such as Loco Translate or WPML.

CVSS3: 8.8
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2022-3494

The Complianz WordPress plugin before 6.3.4, and Complianz Premium WordPress plugin before 6.3.6 allow a translators to inject arbitrary SQL through an unsanitized translation. SQL can be injected through an infected translation file, or by a user with a translator role through translation plugins such as Loco Translate or WPML.

CVSS3: 8.8
1%
Низкий
больше 3 лет назад
github логотип
GHSA-49q7-gc3f-7wp4

The Complianz WordPress plugin before 6.3.4, and Complianz Premium WordPress plugin before 6.3.6 allow a translators to inject arbitrary SQL through an unsanitized translation. SQL can be injected through an infected translation file, or by a user with a translator role through translation plugins such as Loco Translate or WPML.

CVSS3: 8.8
1%
Низкий
больше 3 лет назад

Уязвимостей на страницу