← CVE Intelligence

CVE-2022-1800

Export any WordPress data to XML/CSV < 1.3.5 - Admin+ SQL Injection PUBLISHED

Description (CNA)

The Export any WordPress data to XML/CSV WordPress plugin before 1.3.5 does not sanitize the cpt POST parameter when exporting post data before using it in a database query, leading to an SQL injection vulnerability.

Affected (CNA)

Vendor / productVersions
Unknown / Export any WordPress data to XML/CSVaffected 1.3.5 before 1.3.5

CWE

CWE-89

References

ADP enrichment

CVE

No English description supplied.