cve/2022/CVE-2022-3241.md

CVE-2022-3241

Description

The Build App Online WordPress plugin before 1.0.19 does not properly sanitise and escape some parameters before using them in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection

POC

Reference

• https://wpscan.com/vulnerability/a995dd67-43fc-4087-a7f1-5db57f4c828c

Github

• https://github.com/ARPSyndicate/cvemon
• https://github.com/dipa96/my-days-and-not
• https://github.com/mrnfrancesco/GreedyForSQLi