← Back to CVE List

CVE-2022-1688

Published: 2022-06-08T10:15Z
Last Modified: 2024-11-21T06:41Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
The Note Press WordPress plugin through 0.1.10 does not sanitise and escape the id parameter before using it in various SQL statement via the admin dashboard, leading to SQL Injections > MITRE Terms of Use apply – see LICENSE‑MITRE.txt