Lucene search
+L

3 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 12:32 a.m.13 views

CVE-2022-4161

The Contest Gallery WordPress plugin before 19.1.5.1, Contest Gallery Pro WordPress plugin before 19.1.5.1 do not escape the cgcopystart POST parameter before concatenating it to an SQL query in copy-gallery-images.php. This may allow malicious users with at least author privilege to leak sensiti...

6.5CVSS6.8AI score0.00854EPSS
SaveExploits2References1
Vulnrichment
Vulnrichment
added 2022/12/26 12:27 p.m.12 views

CVE-2022-4161 Contest Gallery < 19.1.5 - Author+ SQL Injection

The Contest Gallery WordPress plugin before 19.1.5.1, Contest Gallery Pro WordPress plugin before 19.1.5.1 do not escape the cgcopystart POST parameter before concatenating it to an SQL query in copy-gallery-images.php. This may allow malicious users with at least author privilege to leak sensiti...

6.8AI score0.00854EPSS
SaveExploits2References2
CVE
CVE
added 2022/12/26 12:27 p.m.89 views

CVE-2022-4161

The CVE-2022-4161 issue affects Contest Gallery WordPress plugin &lt; 19.1.5.1 and Contest Gallery Pro

6.5CVSS6.5AI score0.00854EPSS
SaveExploits2References2Affected Software1
Rows per page
Query Builder