🕵️ CVE-2022-4159 | Contest Gallery Plugin/Contest Gallery Pro Plugin 19.1.5 on WordPress POST Parameter 0_change-gallery.php cg_id sql injection
Nachrichtenbereich: 🕵️ Sicherheitslücken
🔗 Quelle: vuldb.com
A vulnerability was found in Contest Gallery Plugin and Contest Gallery Pro Plugin 19.1.5 on WordPress. It has been classified as critical. This affects an unknown part of the file 0_change-gallery.php of the component POST Parameter Handler. The manipulation of the argument cg_id leads to sql injection. This vulnerability is uniquely identified as CVE-2022-4159. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component. ...