CVE-2022-0771 in SiteSuperCharger Plugin

Сводка

по MITRE • 02.05.2022

The SiteSuperCharger WordPress plugin before 5.2.0 does not validate, sanitise and escape various user inputs before using them in SQL statements via AJAX actions (available to both unauthenticated and authenticated users), leading to Unauthenticated SQL Injections

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Резервировать: 27.02.2022
• Раскрытие: 02.05.2022
• Модерация: принято
• Вход: VDB-198810
• CPE: готов
• CWE: CWE-89 (Подтверждённый)
• CVSS: 7.3 (VulDB)
• EPSS: 0.01602
• KEV: Нет
• Деятельности: Очень низкий
• Сектор: Hostingprovider

Источники

• MITRE: https://www.cve.org/CVERecord?id=CVE-2022-0771
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2022-0771
• CVE Details: https://www.cvedetails.com/cve/CVE-2022-0771/