The Note Press WordPress plugin through 0.1.10 does not...
Moderate severity
Unreviewed
Published
Jun 9, 2022
to the GitHub Advisory Database
•
Updated Jan 27, 2023
Description
Published by the National Vulnerability Database
Jun 8, 2022
Published to the GitHub Advisory Database
Jun 9, 2022
Last updated
Jan 27, 2023
The Note Press WordPress plugin through 0.1.10 does not sanitise and escape the id parameter before using it in various SQL statement via the admin dashboard, leading to SQL Injections
References