Unrated severityNVD Advisory· Published Feb 28, 2022· Updated Aug 2, 2024
Asgaros Forum < 2.0.0 - Subscriber+ Blind SQL Injection
CVE-2022-0411
Description
The Asgaros Forum WordPress plugin before 2.0.0 does not sanitise and escape the post_id parameter before using it in a SQL statement via a REST route of the plugin (accessible to any authenticated user), leading to a SQL injection
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- WordPress/Asgaros Forum plugindescription
- Range: <2.0.0
Patches
Vulnerability mechanics
References
2- plugins.trac.wordpress.org/changeset/2669226/asgaros-forummitrex_refsource_CONFIRM
- wpscan.com/vulnerability/35272197-c973-48ad-8405-538bfbafa172mitrex_refsource_MISC
News mentions
0No linked articles in our index yet.