high7.6
CVE-2022-36394
Authenticated (author+) SQL Injection (SQLi) vulnerability in Contest Gallery plugin <= 17.0.4 at WordPress.
Impact
Authenticated (author+) SQL Injection (SQLi) vulnerability in Contest Gallery plugin <= 17.0.4 at WordPress.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Contest-Gallery | Contest Gallery | through 17.0.4 |
Weakness classification
References
- NVD record
- CVE.org record
- https://patchstack.com/database/vulnerability/contest-gallery/wordpress-contest-gallery-plugin-17-0-4-authenticated-sql-injection-sqli-vulnerability
- https://wordpress.org/plugins/contest-gallery/#developers
- https://patchstack.com/database/vulnerability/contest-gallery/wordpress-contest-gallery-plugin-17-0-4-authenticated-sql-injection-sqli-vulnerability
- https://wordpress.org/plugins/contest-gallery/#developers