by Kastro
Paper/Archive/CVE-2022-47420

CVE-2022-47420

Online ADA Accessibility Suite by Online ADA — WordPress Accessibility Suite by Online ADA Plugin <= 4.12 is vulnerable to SQL Injection

EPSS 0.5%CVSS 9.8
critical.is priorityof 100
38
CVSS 9.8 (NVD, ADP agree)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 41.4.414 × 208.3No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Online ADA Accessibility Suite by Online ADA allows SQL Injection.This issue affects Accessibility Suite by Online ADA: from n/a through 4.12.

Affected

ProductAffectedFixed inSource
Accessibility Suite by Online ADAn/a – 4.12–CNA
accessibility_suite_by_online_ada≤ 4.12–CISA-ADP

Scores by source

CISA ADP9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Patchstack (CNA)6.4CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:L
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refpatchstack.com/database/vulnerability/online-accessibility/wordpress-accessibility-suite-by-online-ada-plugin-4-11-sql-injection?_s_id=cve