Vulnerabilities > CVE-2022-1691 - Unspecified vulnerability in Realtyworkstation Realty Workstation
Attack vector
NETWORK Attack complexity
LOW Privileges required
HIGH Confidentiality impact
NONE Integrity impact
HIGH Availability impact
NONE Summary
The Realty Workstation WordPress plugin before 1.0.15 does not sanitise and escape the trans_edit parameter before using it in a SQL statement when an agent edit a transaction, leading to an SQL injection
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |