Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2022-0383

WP Review Slider < 11.0 - Admin+ SQL Injection

Description

The WP Review Slider WordPress plugin before 11.0 does not sanitise and escape the pid parameter when copying a Twitter source, which could allow a high privilege users to perform SQL Injections attacks

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown WP Review Slider

  • 11.0 to < 11.0affected

References