Blog2Social: Social Media Auto Post & Scheduler, CVE-2022-3246

CVE, Research URL: CVE-2022-3246
Home page URL: Security reports for Blog2Social: Social Media Auto Post & Scheduler
Application: Blog2Social: Social Media Auto Post & Scheduler
Published on: Oct 25, 2022
Research Description: The Blog2Social: Social Media Auto Post & Scheduler WordPress plugin before 6.9.10 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by any authenticated users, such as subscribers
Affected versions: Min -, max 5.0.1.
Status: vulnerable

Blog2Social: Social Media Auto Post &amp; Scheduler, CVE-2022-3246