CVE Vulnerabilities

CVE-2022-3720

Published: Nov 21, 2022 | Modified: Apr 30, 2025
CVSS 3.x
7.2
HIGH
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu
root.io minimus.io echohq.com

The Event Monster WordPress plugin before 1.2.0 does not validate and escape some parameters before using them in SQL statements, which could lead to SQL Injection exploitable by high privilege users

Affected Software

Name Vendor Start Version End Version
Event_monster Awplife * 1.2.0 (excluding)

References