Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: SedLex Component: Simple Quotation Clear all filters
TI-2022-06985 CVE-2022-22735 · GHSA-533j-r4h4-5hxg

Simple Quotation <= 1.3.2 - Subscriber+ SQL injection

Priority MEDIUM 41

The Simple Quotation WordPress plugin through 1.3.2 does not have authorisation (and CSRF) checks in various of its AJAX actions and is lacking escaping of user data when using it in SQL statements, allowing any authenti…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01318 Published 2022-03-14 No fix listed CWE-89