← CVE Intelligence

CVE-2022-0788

WP Fundraising Donation and Crowdfunding Platform < 1.5.0 - Unauthenticated SQLi PUBLISHED

Description (CNA)

The WP Fundraising Donation and Crowdfunding Platform WordPress plugin before 1.5.0 does not sanitise and escape a parameter before using it in a SQL statement via one of it's REST route, leading to an SQL injection exploitable by unauthenticated users

Affected (CNA)

Vendor / productVersions
Unknown / WP Fundraising Donation and Crowdfunding Platformaffected 1.5.0 before 1.5.0

CWE

CWE-89

References

ADP enrichment

CVE

No English description supplied.