CVEs-PoC/2022/CVE-2022-0781.md

CVE-2022-0781

Description

The Nirweb support WordPress plugin before 2.8.2 does not sanitise and escape a parameter before using it in a SQL statement via an AJAX action (available to unauthenticated users), leading to an SQL injection

POC

Reference

• https://wpscan.com/vulnerability/1a8f9c7b-a422-4f45-a516-c3c14eb05161

Github

• https://github.com/ARPSyndicate/cve-scores
• https://github.com/ARPSyndicate/cvemon
• https://github.com/ARPSyndicate/kenzer-templates
• https://github.com/cyllective/CVEs