← CVE Intelligence

CVE-2022-3720

Event Monster < 1.2.1 - Admin+ SQLi PUBLISHED

Description (CNA)

The Event Monster WordPress plugin before 1.2.0 does not validate and escape some parameters before using them in SQL statements, which could lead to SQL Injection exploitable by high privilege users

Affected (CNA)

Vendor / productVersions
Unknown / Event Monsteraffected 0 before 1.2.0

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.