CVE-2022-4371

CVE-2022-4371 affects the Web Invoice WordPress plugin up to version 2.1.3. The issue is an SQL injection caused by improper sanitization/escaping of a parameter used in a SQL statement, exploitable by high-privilege users (admin by default) and potentially others depending on plugin configuratio...

CVE-2022-4371 Web Invoice <= 2.1.3 - Authenticated SQLi

The Web Invoice WordPress plugin through 2.1.3 does not properly sanitize and escape a parameter before using it in a SQL statement, leading to a SQL Injection exploitable by high privilege users such as admin by default. However, depending on the plugin configuration, other users, such as...