Vulnerabilities > CVE-2022-3494 - Unspecified vulnerability in Really-Simple-Plugins Complianz
Attack vector
NETWORK Attack complexity
LOW Privileges required
LOW Confidentiality impact
HIGH Integrity impact
HIGH Availability impact
HIGH Summary
The Complianz WordPress plugin before 6.3.4, and Complianz Premium WordPress plugin before 6.3.6 allow a translators to inject arbitrary SQL through an unsanitized translation. SQL can be injected through an infected translation file, or by a user with a translator role through translation plugins such as Loco Translate or WPML.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 2 |