QwikSec

Security Database

CVE

CWE

Training

CVE-2022-22735

Published: Mar 14, 2022

Modified: Aug 3, 2024

PUBLISHED

Description

The Simple Quotation WordPress plugin through 1.3.2 does not have authorisation (and CSRF) checks in various of its AJAX actions and is lacking escaping of user data when using it in SQL statements, allowing any authenticated users, such as subscriber to perform SQL injection attacks

Vendor	Product	Versions
Unknown	Simple Quotation	affected `1.3.2 - <= 1.3.2`

Weaknesses (CWE)

References

https://wpscan.com/vulnerability/6940a97e-5a75-405c-be74-bedcc3a8ee00

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.