CVE-2022-1023

CVE-2022-1023: Podcast Importer SecondLine < 1.3.8 - Admin+ SQLi

Vendor Unknown

Product Podcast Importer SecondLine

Weakness CWE-89 · SQLi

Published April 11, 2022

Last update August 2, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The Podcast Importer SecondLine WordPress plugin before 1.3.8 does not sanitise and properly escape some imported data, which could allow SQL injection attacks to be performed by imported a malicious podcast file

Key dates

02Disclosure timeline

April 11, 2022 CVE published

August 2, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2022-1023 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/89.html

Related vulnerabilities

CVE-2022-1023: Podcast Importer SecondLine < 1.3.8 - Admin+ SQLi

01Description

02Disclosure timeline

03References

04Related CVE