← CVE Intelligence

CVE-2022-0817

BadgeOS <= 3.7.0 - Unauthenticated SQLi PUBLISHED

Description (CNA)

The BadgeOS WordPress plugin through 3.7.0 does not sanitise and escape a parameter before using it in a SQL statement via an AJAX action, leading to an SQL Injection exploitable by unauthenticated users

Affected (CNA)

Vendor / productVersions
Unknown / BadgeOSaffected 3.7.0 through 3.7.0

CWE

CWE-89

References

ADP enrichment

CVE

No English description supplied.