CVE-2022-3254 — AWP Classifieds Plugin < 4.3 - Unauthenticated SQLi

Description (CNA)

The WordPress Classifieds Plugin WordPress plugin before 4.3 does not properly sanitise and escape some parameters before using them in a SQL statement via an AJAX action available to unauthenticated users and when a specific premium module is active, leading to a SQL injection

Affected (CNA)

Vendor / product	Versions
Unknown / WordPress Classifieds Plugin – Ad Directory & Listings by AWP Classifieds	affected 4.3 before 4.3

CWE

CWE-89

References

https://wpscan.com/vulnerability/546c47c2-5b4b-46db-b754-c6b43aef2660

ADP enrichment

CVE

No English description supplied.

https://wpscan.com/vulnerability/546c47c2-5b4b-46db-b754-c6b43aef2660

CISA-ADP

No English description supplied.

No references supplied.