Search Results (1 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2022-4445 1 Armandofiore 1 Fl3r Feelbox 2025-10-07 9.8 Critical
The FL3R FeelBox WordPress plugin through 8.1 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection.