CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

1 matches found

OSV•added 2022/12/26 1:15 p.m.•1 views

CVE-2022-4165

The Contest Gallery WordPress plugin before 19.1.5.1, Contest Gallery Pro WordPress plugin before 19.1.5.1 do not escape the cgorder POST parameter before concatenating it to an SQL query in order-custom-fields-with-and-without-search.php. This may allow malicious users with at least author...

6.5CVSS5.8AI score0.00741EPSS

Exploits2References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by