VulnerabilityModified

CVE-2022-4166

This may allow malicious users with at least author privilege to leak sensitive information from the site's database.

MEDIUM 6.5EPSS 0.85%

Does this matter?

Lower severity and a low EPSS score (0.85%). Track it; it rarely justifies an emergency change on its own.

Description

The Contest Gallery WordPress plugin before 19.1.5.1, Contest Gallery Pro WordPress plugin before 19.1.5.1 do not escape the addCountS POST parameter before concatenating it to an SQL query in 4_activate.php. This may allow malicious users with at least author privilege to leak sensitive information from the site's database.

CVSS 3.1: 6.5 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS: 0.85% probability · 56th percentile
CISA KEV: Not listed
Affected: contest-gallery/contest gallery
Source: contact@wpscan.com

References

https://bulletin.iese.de/post/contest-gallery_19-1-4-1_12Exploit, Third Party Advisory
https://wpscan.com/vulnerability/6e7de2bb-5f71-4c27-ae79-4f6b2ba7f86fExploit, Third Party Advisory
https://bulletin.iese.de/post/contest-gallery_19-1-4-1_12Exploit, Third Party Advisory
https://wpscan.com/vulnerability/6e7de2bb-5f71-4c27-ae79-4f6b2ba7f86fExploit, Third Party Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.