low2.7
CVE-2022-1689
The Note Press WordPress plugin through 0.1.10 does not sanitise and escape the Update parameter before using it in a SQL statement when updating a note via th…
Impact
The Note Press WordPress plugin through 0.1.10 does not sanitise and escape the Update parameter before using it in a SQL statement when updating a note via the admin dashboard, leading to an SQL injection
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Datainterlock | Note Press | through 0.1.10 |