CVE-2022-4157: Contest Gallery < 19.1.5 - Admin+ SQL Injection
First published: Mon Dec 26 2022(Updated: )
The Contest Gallery WordPress plugin before 19.1.5.1, Contest Gallery Pro WordPress plugin before 19.1.5.1 do not escape the cg_option_id POST parameter before concatenating it to an SQL query in export-votes-all.php. This may allow malicious users with administrator privileges (i.e. on multisite WordPress configurations) to leak sensitive information from the site's database.
Credit: contact@wpscan.com contact@wpscan.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Contest-gallery Contest Gallery | <19.1.5.1 | |
| Contest-gallery Contest Gallery | <19.1.5.1 | |
| <19.1.5.1 | ||
| <19.1.5.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2022-4157?
CVE-2022-4157 is a vulnerability in the Contest Gallery WordPress plugin and Contest Gallery Pro WordPress plugin that allows malicious users with administrator privileges to execute arbitrary SQL queries.
What versions of the Contest Gallery plugins are affected?
Versions up to and excluding 19.1.5.1 of the Contest Gallery WordPress plugin and Contest Gallery Pro WordPress plugin are affected.
What is the severity of CVE-2022-4157?
CVE-2022-4157 has a severity keyword of 'medium' and a severity value of 4.9.
How can the vulnerability be exploited?
The vulnerability can be exploited by malicious users with administrator privileges who can manipulate the 'cg_option_id' POST parameter to execute arbitrary SQL queries in the 'export-votes-all.php' file.
Are there any references for more information on CVE-2022-4157?
Yes, you can find more information on CVE-2022-4157 at the following references: [https://bulletin.iese.de/post/contest-gallery_19-1-4-1_3](https://bulletin.iese.de/post/contest-gallery_19-1-4-1_3) and [https://wpscan.com/vulnerability/71feec63-67a5-482e-bf77-1396c306fae6](https://wpscan.com/vulnerability/71feec63-67a5-482e-bf77-1396c306fae6).
- collector/nvd-index
- agent/references
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/title
- agent/severity
- agent/weakness
- agent/description
- agent/first-publish-date
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/last-modified-date
- agent/author
- agent/softwarecombine
- agent/tags
- agent/event
- vendor/contest-gallery
- canonical/contest-gallery contest gallery