Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 21:38:40 +0000 CVE-2022-4152 — Contest Gallery < 19.1.5 - Author+ SQL Injection https://cve.radiocsirt.org/vuln/cve-2022-4152 <p><strong>Affected:</strong> Unknown Contest Gallery, Unknown Contest Gallery Pro</p> <p>The Contest Gallery WordPress plugin before 19.1.5, Contest Gallery Pro WordPress plugin before 19.1.5 do not escape the option_id POST parameter before concatenating it to an SQL query in edit-options.php. This may allow malicious users with at least author privilege to leak sensitive information from the site&#39;s database.</p> <p><strong>Affected:</strong> Unknown Contest Gallery, Unknown Contest Gallery Pro</p> <p>The Contest Gallery WordPress plugin before 19.1.5, Contest Gallery Pro WordPress plugin before 19.1.5 do not escape the option_id POST parameter before concatenating it to an SQL query in edit-options.php. This may allow malicious users with at least author privilege to leak sensitive information from the site&#39;s database.</p> https://cve.radiocsirt.org/vuln/cve-2022-4152