CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

2 matches found

Rapid7 Vulnerability Database (full)•added 2022/12/26 12:00 a.m.•3 views

CVE-2022-4166: Undefined Security Weakness

The Contest Gallery WordPress plugin before 19.1.5.1, Contest Gallery Pro WordPress plugin before 19.1.5.1 do not escape the addCountS POST parameter before concatenating it to an SQL query in 4activate.php. This may allow malicious users with at least author privilege to leak sensitive informati...

6.5CVSS5.8AI score0.00854EPSS

SaveExploits2References2

Rapid7 Vulnerability Database (full)•added 2022/12/26 12:00 a.m.•2 views

CVE-2022-4163: Undefined Security Weakness

The Contest Gallery WordPress plugin before 19.1.5.1, Contest Gallery Pro WordPress plugin before 19.1.5.1 do not escape the cgdeactivate and cgactivate POST parameters before concatenating it to an SQL query in 2deactivate.php and 4activate.php, respectively. This may allow malicious users with ...

6.5CVSS5.8AI score0.00854EPSS

SaveExploits2References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by