by Kastro
Paper/Archive/CVE-2022-2754

CVE-2022-2754

Unknown Ketchup Restaurant Reservations — Ketchup Restaurant Reservations <= 1.0.0 - Unauthenticated Blind SQLi

EPSS 39%CVSS 9.8
critical.is priorityof 100
49
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 98.6.986 × 2019.7No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

The Ketchup Restaurant Reservations WordPress plugin through 1.0.0 does not validate and escape some reservation parameters before using them in SQL statements, which could allow unauthenticated attackers to perform SQL Injection attacks

Affected

ProductAffectedFixed inSource
Ketchup Restaurant Reservations1.0.0 – 1.0.0–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refwpscan.com/vulnerability/e3c6d137-ff6e-432a-a21a-b36dc81f73c5