CVE-2022-0349
Assigner: WPScan
Published: 2022-03-07T08:16:27
State: PUBLISHED
affected: product: NotificationX – Best FOMO, Social Proof, WooCommerce Sales Popup & Notification Bar Plugin With Elementor
vendor: Unknown
versions: lessThan: 2.3.9
status: affected
version: 2.3.9
versionType: custom
credits: value: Krzysztof Zając
descriptions: value: The NotificationX WordPress plugin before 2.3.9 does not sanitise and escape the nx_id parameter before using it in a SQL statement, leading to an Unauthenticated Blind SQL Injection
problemTypes: descriptions: cweId: CWE-89
description: CWE-89 SQL Injection
type: CWE
source: discovery: EXTERNAL
title: NotificationX < 2.3.9 - Unauthenticated Blind SQL Injection
x_generator: WPScan CVE Generator