Security Advisory
CVE-2022-1281
9.8
CRITICAL
Vulnerability Description
The Photo Gallery WordPress plugin through 1.6.3 does not properly escape the $_POST['filter_tag'] parameter, which is appended to an SQL query, making SQL Injection attacks possible.
Published Date
May 2, 2022
Official Source
NIST NVD Advisory