CVE-2022-0773CWE-89

CVE-2022-0773: fallo en Documentor – Create Product Documentation

Documentor <= 1.5.3 - Unauthenticated SQLi

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear Documentor – Create Product Documentation

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

30Vexday Risk Score

Corrige pronto. Ella tiene exploit funcional público.

ssvc Attendepss 43%
The Documentor WordPress plugin through 1.5.3 fails to sanitize and escape user input before it is being interpolated in an SQL statement and then executed, leading to an SQL Injection exploitable by unauthenticated users.
Productos afectados
Unknown · Documentor – Create Product Documentation