Vulnerability — CVE-2022-3243

CVE-2022-3243

Reference to the description:: https://nvd.nist.gov/vuln/detail/CVE-2022-3243
Description:: The Import all XML, CSV & TXT WordPress plugin before 6.5.8 does not properly sanitise and escape imported data before using them back SQL statements, leading to SQL injection exploitable by high privilege users such as admin
Last updated date:: 06/07/2023

Type:: exploit
Confidence:: HIGH
Date of publishing:: 10/20/2022
Reference url to background: https://wpscan.com/vulnerability/9f03bc1a-214f-451a-89fd-2cd3517e8f8a