CVE-2022-2958

The BadgeOS WordPress plugin before 3.7.1.3 does not sanitise and escape parameters before using them in SQL statements via AJAX actions available to any authenticated users, leading to SQL Injections

Score

CVSS 3.1 8.8 High

Status

Modified - contact@wpscan.com

Published

2022-09-19

Last modified

2024-08-03

Weaknesses

CWE-89

Affected products

• Badgos (Badgeos)
• Badgeos (Unknown)

References

• https://wpscan.com/vulnerability/8743534f-8ebd-496a-99bc-5052a8bac86a