admin/cve
1
0
Fork 0
mirror of https://github.com/0xMarcio/cve.git synced 2025-05-05 18:27:17 +00:00
Code Issues Packages Projects Releases Wiki Activity
cve/2022/CVE-2022-4166.md
0xMarcio 48a00929ac Removed duplicates
2024-06-18 02:51:15 +02:00

1013 B
Raw Permalink Blame History

CVE-2022-4166

Description

The Contest Gallery WordPress plugin before 19.1.5.1, Contest Gallery Pro WordPress plugin before 19.1.5.1 do not escape the addCountS POST parameter before concatenating it to an SQL query in 4_activate.php. This may allow malicious users with at least author privilege to leak sensitive information from the site's database.

POC

Reference

Github

No PoCs found on GitHub currently.