CVE-2022-2754CWE-89

CVE-2022-2754: vulnerability in Ketchup Restaurant Reservations

Ketchup Restaurant Reservations <= 1.0.0 - Unauthenticated Blind SQLi

Published · Updated

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

15Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 39%
The Ketchup Restaurant Reservations WordPress plugin through 1.0.0 does not validate and escape some reservation parameters before using them in SQL statements, which could allow unauthenticated attackers to perform SQL Injection attacks
Related CVEs — Ketchup Restaurant Reservations

In the same product, most dangerous first.