← Database

CVE-2022-1691

MEDIUM CVSS: 4.9 Published: 2022-06-08 Modified: 2026-06-17

Description

The Realty Workstation WordPress plugin before 1.0.15 does not sanitise and escape the trans_edit parameter before using it in a SQL statement when an agent edit a transaction, leading to an SQL injection

Affected Platforms

Realtyworkstation Realty Workstation

Weakness Type

CWE-89

References