← CVE Intelligence

CVE-2022-0887

Easy Social Icons < 3.1.4 - Admin+ SQL Injection PUBLISHED

Description (CNA)

The Easy Social Icons WordPress plugin before 3.1.4 does not sanitize the selected_icons attribute to the cnss_widget before using it in an SQL statement, leading to a SQL injection vulnerability.

Affected (CNA)

Vendor / productVersions
Unknown / Easy Social Iconsaffected 3.1.4 before 3.1.4

CWE

CWE-89

References

ADP enrichment

CVE

No English description supplied.