3 matches found
Sql injection
The Documentor WordPress plugin through 1.5.3 fails to sanitize and escape user input before it is being interpolated in an SQL statement and then executed, leading to an SQL Injection exploitable by unauthenticated users...
7.5CVSS9.8AI score0.43259EPSS
SaveExploits2References1Affected Software1
CVE-2022-0773
Vulnerability: Documentor WordPress plugin (versions
9.8CVSS9.9AI score0.43259EPSS
SaveExploits2References1Affected Software1
CVE-2022-0773: Improper Neutralization of Special Elements used in an SQL Command
The Documentor WordPress plugin through 1.5.3 fails to sanitize and escape user input before it is being interpolated in an SQL statement and then executed, leading to an SQL Injection exploitable by unauthenticated users...
9.8CVSS8.2AI score0.43259EPSS
SaveExploits2References3
20