Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2022-1690

Note Press <= 0.1.10 - Admin+ SQLi via Bulk Actions

Description

The Note Press WordPress plugin through 0.1.10 does not sanitise and escape the ids from the bulk actions before using them in a SQL statement in an admin page, leading to an SQL injection

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown Note Press

  • 0.1.10 to ≤ 0.1.10affected

References