CVE-2022-1182

CVE-2022-1182: Visual Slide Box Builder <= 3.2.9 - Subscriber+ SQLi

Vendor Unknown
Product Visual Slide Box Builder
Weakness CWE-89 · SQLi
Published May 16, 2022
Last update August 2, 2024

CVSS base score

What the vulnerability does

01Description

The Visual Slide Box Builder WordPress plugin through 3.2.9 does not sanitise and escape various parameters before using them in SQL statements via some of its AJAX actions available to any authenticated users (such as subscriber), leading to SQL Injections

Key dates

02Disclosure timeline

May 16, 2022 CVE published
August 2, 2024 Record updated

Related vulnerabilities

04Related CVE