cbcvebase.

Fontsy Project Fontsy vulnerabilities

1 known vulnerability affecting fontsy_project/fontsy.

Total CVEs
1
CISA KEV
0
Public exploits
1
Exploited in wild
1
Severity breakdown
CRITICAL1

Vulnerabilities

Page 1 of 1
CVE-2022-4447P1CRITICALCVSS 9.8ExploitedPoC≤ 1.8.62023-01-16
CVE-2022-4447 [CRITICAL] CWE-89 CVE-2022-4447: The Fontsy WordPress plugin through 1.8.6 does not properly sanitize and escape a parameter before u The Fontsy WordPress plugin through 1.8.6 does not properly sanitize and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection.
nvd
Fontsy Project Fontsy vulnerabilities | cvebase