Read the docs

Iws-geo-form-fields Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Iws-geo-form-fields Project records in CISA KEV

No Iws-geo-form-fields Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Iws-geo-form-fields 1 record HIGH

Records

1 record

TI-2022-03764 CVE-2022-4117 · GHSA-9h74-mx6m-3v5r

IWS - Geo Form Fields <= 1.0 - Unauthenticated SQLi

Priority HIGH 82

The IWS WordPress plugin through 1.0 does not properly escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to an unauthenticated SQL injection.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.05303 Published 2022-12-26 No fix listed
Open these records in search →