← CVE Intelligence

CVE-2022-0781

Nirweb support < 2.8.2 - Unauthenticated SQLi PUBLISHED

Description (CNA)

The Nirweb support WordPress plugin before 2.8.2 does not sanitise and escape a parameter before using it in a SQL statement via an AJAX action (available to unauthenticated users), leading to an SQL injection

Affected (CNA)

Vendor / productVersions
Unknown / Nirweb supportaffected 2.8.2 before 2.8.2

CWE

CWE-89

References

ADP enrichment

CVE

No English description supplied.