CVE-2022-3246

The Blog2Social: Social Media Auto Post & Scheduler WordPress plugin before 6.9.10 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by any authenticated users, such as subscribers

Affected products

Blog2Social

Adenion blog2social

< 6.9.10

Fix

Available

CVSS 3.1

8.8 HIGH

EPSS

1.1% (64th percentile)

Weakness

CWE-89

NVD status

Modified

Published

2022-10-25