CVE-2022-4373

creationtimestamp| type| source ---|---|--- 2023-01-03 00:17:04+00:00| seen| https://t.me/cibsecurity/55765 2023-12-11 00:13:41+00:00| seen| https://t.me/arpsyndicate/1680...

CVE-2022-4373

CVE-2022-4373 affects the Quote-O-Matic WordPress plugin (versions up to 1.0.5). The issue is a SQL injection caused by improper sanitization/escaping of a parameter used in a SQL statement, exploitable by high-privilege users such as admins. Public disclosures and PoCs indicate an Admin+ SQLi ve...

CVE-2022-4373 Quote-O-Matic <= 1.0.5 - Admin+ SQLi

The Quote-O-Matic WordPress plugin through 1.0.5 does not properly sanitize and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admin...