by Kastro
Paper/Archive/CVE-2022-0771

CVE-2022-0771

Unknown SiteSuperCharger — SiteSuperCharger < 5.2.0 - Unauthenticated SQLi

EPSS 2%CVSS 9.8
critical.is priorityof 100
45
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 75.9.759 × 2015.2No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

The SiteSuperCharger WordPress plugin before 5.2.0 does not validate, sanitise and escape various user inputs before using them in SQL statements via AJAX actions (available to both unauthenticated and authenticated users), leading to Unauthenticated SQL Injections

Affected

ProductAffectedFixed inSource
SiteSuperCharger5.2.0 – < 5.2.05.2.0CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refwpscan.com/vulnerability/6139e732-88f2-42cb-9dc3-42ad49731e75