CVE-2022-0827 | BDVDB-2026-177809 Detail

Bestbooks

Description#

The Bestbooks WordPress plugin through 2.6.3 does not sanitise and escape some parameters before using them in a SQL statement via an AJAX action, leading to an SQL Injection exploitable by unauthenticated users

Impact#

No impact statement in the source data.

Weaknesses#

CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

References#

https://wpscan.com/vulnerability/0d208ebc-7805-457b-aa5f-ffd5adb2f3be

Exploit#

No public exploit known

History#

Version 12022-06-13Record published in the CVE List.
Version 22024-08-02Most recent update recorded in the CVE List.