Lucene search

K
prionPRIOn knowledge basePRION:CVE-2022-3141
HistorySep 19, 2022 - 2:15 p.m.

Sql injection

2022-09-1914:15:00
PRIOn knowledge base
www.prio-n.com
12
sql injection
wordpress
authenticated
vulnerability
multilingual sites
plugin

8.9 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

58.5%

The Translate Multilingual sites WordPress plugin before 2.3.3 is vulnerable to an authenticated SQL injection. By adding a new language (via the settings page) containing specific special characters, the backticks in the SQL query can be surpassed and a time-based blind payload can be injected.

CPENameOperatorVersion
translatepresslt2.3.3

8.9 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

58.5%