CVE-2022-3131
HIGH
7.2
CVSS 3.1
Description
The Search Logger WordPress plugin through 0.9 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users
Affected products and versions
- Unknown Search Logger – Know What Your Visitors Search — From 0.9 (including) to 0.9 (including)
- codexpert search_logger — Up to and including 0.9
References
- wpscan.com https://wpscan.com/vulnerability/b6c62e53-ae49-4fe0-aed9-0c493fc4442d Exploit, Third Party Advisory
- nvd.nist.gov Official NVD record