Security Advisory

CVE-2022-2559

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2022-08-29 17:15:36
Last updated 2024-08-03 00:39:08
Assigner WPScan
State PUBLISHED

Description

The Fluent Support WordPress plugin before 1.5.8 does not properly sanitise, validate and escape various parameters before using them in an SQL statement, leading to an SQL Injection vulnerability exploitable by high privilege users