Lucene search
PRIOn knowledge basePRION:CVE-2022-3142HistorySep 19, 2022 - 2:15 p.m.
Sql injection
2022-09-1914:15:00
PRIOn knowledge base
www.prio-n.com
14
nex-forms
wordpress plugin
sql injection
input sanitisation
forms statistics chart
The NEX-Forms WordPress plugin before 7.9.7 does not properly sanitise and escape user input before using it in SQL statements, leading to SQL injections. The attack can be executed by anyone who is permitted to view the forms statistics chart, by default administrators, however can be configured otherwise via the plugin settings.
Related
wpvulndb
wpvulndb
NEX-Forms < 7.9.7 - Authenticated SQLi
2022-08-01 00:00:00
packetstorm
packetstorm
WordPress NEX-Forms SQL Injection
2023-03-27 00:00:00
nuclei
nuclei
NEX-Forms Plugin < 7.9.7 - SQL Injection
2023-10-17 07:20:28
cvelist
cvelist
CVE-2022-3142 NEX-Forms < 7.9.7 - Authenticated SQLi
2022-09-19 00:00:00
cve
cve
CVE-2022-3142
2022-09-19 14:15:11
wpexploit
wpexploit
NEX-Forms < 7.9.7 - Authenticated SQLi
2022-08-01 00:00:00
nvd
nvd
CVE-2022-3142
2022-09-19 14:15:11
patchstack
patchstack
zdt
zdt
exploitdb
exploitdb
NEX-Forms WordPress plugin < 7.9.7 - Authenticated SQLi
2023-03-25 00:00:00