cbcvebase.

Dwbooster Cp Image Store With Slideshow vulnerabilities

1 known vulnerability affecting dwbooster/cp_image_store_with_slideshow.

Total CVEs
1
CISA KEV
0
Public exploits
1
Exploited in wild
0
Severity breakdown
CRITICAL1

Vulnerabilities

Page 1 of 1
CVE-2022-1692P2CRITICALCVSS 9.8PoCfixed in 1.0.682022-06-08
CVE-2022-1692 [CRITICAL] CWE-89 CVE-2022-1692: The CP Image Store with Slideshow WordPress plugin before 1.0.68 does not sanitise and escape the or The CP Image Store with Slideshow WordPress plugin before 1.0.68 does not sanitise and escape the ordering_by query parameter before using it in a SQL statement in pages where the [codepeople-image-store] is embed, allowing unauthenticated users to perform an SQL injection attack
nvd
Dwbooster Cp Image Store With Slideshow vulnerabilities | cvebase