NetSight
high7.2

CVE-2022-1023

The Podcast Importer SecondLine WordPress plugin before 1.3.8 does not sanitise and properly escape some imported data, which could allow SQL injection attacks…

Impact

The Podcast Importer SecondLine WordPress plugin before 1.3.8 does not sanitise and properly escape some imported data, which could allow SQL injection attacks to be performed by imported a malicious podcast file

Affected products

VendorProductAffected versions
SecondlinethemesPodcast Importer Secondline
before 1.3.8

Weakness classification

References