CVE-2022-0771 in SiteSuperCharger Plugin

Sumário

de MITRE • 02/05/2022

The SiteSuperCharger WordPress plugin before 5.2.0 does not validate, sanitise and escape various user inputs before using them in SQL statements via AJAX actions (available to both unauthenticated and authenticated users), leading to Unauthenticated SQL Injections

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Reservar: 27/02/2022
• Divulgação: 02/05/2022
• Moderação: aceite
• Entrada: VDB-198810
• CPE: pronto
• CWE: CWE-89 (confirmado)
• CVSS: 7.3 (VulDB)
• EPSS: 0.01602
• KEV: não
• Atividades: muito baixo
• Sector: Hostingprovider

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2022-0771
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2022-0771
• CVE Details: https://www.cvedetails.com/cve/CVE-2022-0771/