high7.2
CVE-2022-0255
The Database Backup for WordPress plugin before 2.5.1 does not properly sanitise and escape the fragment parameter before using it in a SQL statement in the ad…
Impact
The Database Backup for WordPress plugin before 2.5.1 does not properly sanitise and escape the fragment parameter before using it in a SQL statement in the admin dashboard, leading to a SQL injection issue
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Deliciousbrains | Database Backup | before 2.5.1 |