CVE-2022-1691

The Realty Workstation WordPress plugin before 1.0.15 does not sanitise and escape the trans_edit parameter before using it in a SQL statement when an agent edit a transaction, leading to an SQL injection
References
Configurations

Configuration 1

cpe:2.3:a:realtyworkstation:realty_workstation:*:*:*:*:*:wordpress:*:*

Information

Published : 2022-06-08 10:15

Updated : 2023-01-31 05:28


NVD link : CVE-2022-1691

Mitre link : CVE-2022-1691

Products Affected
No products.
CWE