← Database

CVE-2022-3981

HIGH CVSS: 8.8 Published: 2022-12-12 Modified: 2026-06-17

Description

The Icegram Express WordPress plugin before 5.5.1 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by any authenticated users, such as subscriber

Affected Platforms

Icegram Email Subscribers \& Newsletters

Weakness Type

Unknown

References