1. Home
  2. CVE Database
  3. CVE-2022-1685
MEDIUM · 4.9

CVE-2022-1685

The Five Minute Webshop WordPress plugin through 1.3.2 does not properly validate and sanitise the orderby parameter before using it in a SQL statement via the Manage Products admin page, leading to a...

Vulnerability Description

The Five Minute Webshop WordPress plugin through 1.3.2 does not properly validate and sanitise the orderby parameter before using it in a SQL statement via the Manage Products admin page, leading to an SQL Injection

CVSS Score

4.9

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
HIGH
Availability
NONE

Affected Products

VendorProductVersions
Five Minute Webshop ProjectFive Minute Webshop<= 1.3.2

Related Weaknesses (CWE)

CWE-89

References

FAQ

What is CVE-2022-1685?

CVE-2022-1685 is a vulnerability with a CVSS score of 4.9 (MEDIUM). The Five Minute Webshop WordPress plugin through 1.3.2 does not properly validate and sanitise the orderby parameter before using it in a SQL statement via the Manage Products admin page, leading to a...

How severe is CVE-2022-1685?

CVE-2022-1685 has been rated MEDIUM with a CVSS base score of 4.9/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2022-1685?

Check the references section above for vendor advisories and patch information. Affected products include: Five Minute Webshop Project Five Minute Webshop.