CVE-2022-3302
Assigner: WPScan
Published: 2022-10-25T00:00:00
State: PUBLISHED
title: Anti-Spam by CleanTalk < 5.185.1 - Admin+ SQLi
descriptions: value: The Spam protection, AntiSpam, FireWall by CleanTalk WordPress plugin before 5.185.1 does not validate ids before using them in a SQL statement, which could lead to SQL injection exploitable by high privilege users such as admin
affected: vendor: Unknown
product: Spam protection, AntiSpam, FireWall by CleanTalk
versions: version: 5.185.1
status: affected
lessThan: 5.185.1
versionType: custom
credits: value: Nguyen Duy Quoc Khanh
problemTypes: descriptions: type: CWE
description: CWE-89 SQL Injection
cweId: CWE-89
x_generator: WPScan CVE Generator
source: discovery: EXTERNAL