← Back

Iws Geo Form Fields

iws-geo-form-fields

Vendor: Iws Geo Form Fields Project • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2022-4117
1Iws Geo Form Fields Project
1Iws Geo Form Fields
Jun 17, 2026
Dec 26, 2022
N/A· v4
9.8 CRITICAL· v3
N/A· v2
The IWS WordPress plugin through 1.0 does not properly escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to an unauthenticated SQL injection.