Vulnerabilities > CVE-2022-23911 - Unspecified vulnerability in Accesspressthemes AP Custom Testimonial 1.4.6

047910
CVSS 7.2 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
HIGH
Confidentiality impact
HIGH
Integrity impact
HIGH
Availability impact
HIGH
network
low complexity
accesspressthemes

Summary

The Testimonial WordPress Plugin WordPress plugin before 1.4.7 does not validate and escape the id parameter before using it in a SQL statement when retrieving a testimonial to edit, leading to a SQL Injection

Vulnerable Configurations

Part Description Count
Application
Accesspressthemes
1