CVE-2022-3300

The Form Maker by 10Web WordPress plugin before 1.15.6 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admin

Affected products

The Form Maker

10web Form Maker

< 1.15.6

Fix

Available

CVSS 3.1

7.2 HIGH

EPSS

1.1% (64th percentile)

Weakness

CWE-89

NVD status

Modified

Published

2022-10-25