2 matches found
WordPress Plugin Contest Gallery SQL注入漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...
7.5CVSS7.4AI score0.00907EPSS
SaveExploits2References3
CVE-2022-4158: Undefined Security Weakness
The Contest Gallery WordPress plugin before 19.1.5.1, Contest Gallery Pro WordPress plugin before 19.1.5.1 do not escape the cgFields POST parameter before concatenating it to an SQL query in users-registry-check-registering-and-login.php. This may allow malicious visitors to leak sensitive...
7.5CVSS5.7AI score0.00907EPSS
SaveExploits2References2
20