Lucene search
PRIOn knowledge basePRION:CVE-2022-0478HistoryMar 14, 2022 - 3:15 p.m.
Sql injection
2022-03-1415:15:00
PRIOn knowledge base
www.prio-n.com
3
The Event Manager and Tickets Selling for WooCommerce WordPress plugin before 3.5.8 does not validate and escape the post_author_gutenberg parameter before using it in a SQL statement when creating/editing events, which could allow users with a role as low as contributor to perform SQL Injection attacks
| CPE | Name | Operator | Version |
|---|---|---|---|
| event_manager_and_tickets_selling_for_woocommerce | lt | 3.5.8 |
Related
wpexploit
wpexploit
Event Manager for WooCommerce < 3.5.8 - Contributor+ SQL Injection
2022-02-21 00:00:00
wpvulndb
wpvulndb
Event Manager for WooCommerce < 3.5.8 - Contributor+ SQL Injection
2022-02-21 00:00:00
cvelist
cvelist
nvd
nvd
CVE-2022-0478
2022-03-14 15:15:09
patchstack
patchstack
cve
cve
CVE-2022-0478
2022-03-14 15:15:09