CVE-2022-23911

CVE-2022-23911: AP Custom Testimonial < 1.4.8 - Admin+ SQL Injection

Vendor Unknown
Product Testimonial WordPress Plugin – AP Custom Testimonial
Weakness CWE-89 · SQLi
Published February 28, 2022
Last update August 3, 2024
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The Testimonial WordPress Plugin WordPress plugin before 1.4.7 does not validate and escape the id parameter before using it in a SQL statement when retrieving a testimonial to edit, leading to a SQL Injection

Key dates

02Disclosure timeline

February 28, 2022 CVE published
August 3, 2024 Record updated