CVE-2022-47420
Assigner: Patchstack
Published: 2023-11-06T07:41:14.661Z
State: PUBLISHED
affected: collectionURL: https://wordpress.org/plugins
defaultStatus: unaffected
packageName: online-accessibility
product: Accessibility Suite by Online ADA
vendor: Online ADA
versions: lessThanOrEqual: 4.11
status: affected
version: n/a
versionType: custom
credits: type: finder
user: 00000000-0000-4000-9000-000000000000
value: minhtuanact (Patchstack Alliance)
descriptions: supportingMedia: base64: no
type: text/html
value: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Online ADA Accessibility Suite by Online ADA allows SQL Injection.<p>This issue affects Accessibility Suite by Online ADA: from n/a through 4.11.</p>
value: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Online ADA Accessibility Suite by Online ADA allows SQL Injection.This issue affects Accessibility Suite by Online ADA: from n/a through 4.11.


impacts: capecId: CAPEC-66
descriptions: value: CAPEC-66 SQL Injection
problemTypes: descriptions: cweId: CWE-89
description: CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
type: CWE
source: discovery: EXTERNAL
title: WordPress Accessibility Suite by Online ADA Plugin <= 4.11 is vulnerable to SQL Injection
x_generator: engine: Vulnogram 0.1.0-dev