Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2022-1023

Podcast Importer SecondLine < 1.3.8 - Admin+ SQLi

Description

The Podcast Importer SecondLine WordPress plugin before 1.3.8 does not sanitise and properly escape some imported data, which could allow SQL injection attacks to be performed by imported a malicious podcast file

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown Podcast Importer SecondLine

  • 1.3.8 to < 1.3.8affected

References