CVE-2022-4371

CVE-2022-4371 affects the Web Invoice WordPress plugin up to version 2.1.3. The issue is an SQL injection caused by improper sanitization/escaping of a parameter used in a SQL statement, exploitable by high-privilege users (admin by default) and potentially others depending on plugin configuratio...