logo
DATABASE RESOURCES PRICING ABOUT US

CVE-2022-4117

Description

The IWS WordPress plugin through 1.0 does not properly escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to an unauthenticated SQL injection.


Affected Software


CPE Name Name Version
iws-geo-form-fields_project:iws-geo-form-fields iws-geo-form-fields project iws-geo-form-fields 1.0

Related