AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2022-4166

MEDIUM · CVSS 6.5 EPSS 0.85%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2022-12-26 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2022-4166
Severity
MEDIUM
CVSS
6.5
EPSS
0.85%
WordPress

Original NVD Description

The Contest Gallery WordPress plugin before 19.1.5.1, Contest Gallery Pro WordPress plugin before 19.1.5.1 do not escape the addCountS POST parameter before concatenating it to an SQL query in 4_activate.php. This may allow malicious users with at least author privilege to leak sensitive information from the site's database.