cbcvebase.

Iws-Geo-Form-Fields Project Iws-Geo-Form-Fields vulnerabilities

1 known vulnerability affecting iws-geo-form-fields_project/iws-geo-form-fields.

Total CVEs
1
CISA KEV
0
Public exploits
1
Exploited in wild
1
Severity breakdown
CRITICAL1

Vulnerabilities

Page 1 of 1
CVE-2022-4117P1CRITICALCVSS 9.8ExploitedPoC≤ 1.02022-12-26
CVE-2022-4117 [CRITICAL] CWE-89 CVE-2022-4117: The IWS WordPress plugin through 1.0 does not properly escape a parameter before using it in a SQL s The IWS WordPress plugin through 1.0 does not properly escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to an unauthenticated SQL injection.
nvd
Iws-Geo-Form-Fields Project Iws-Geo-Form-Fields vulnerabilities | cvebase