CVE-2022-45373highCWE-89

CVE-2022-45373: falha de alta gravidade em Jason Crouse, VeronaLabs Slimstat Analytics

WordPress Slimstat Analytics Plugin <= 5.0.4 is vulnerable to SQL Injection

Publicada em · Atualizada em

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 8.8epss 0.5%
probabilidade de exploração
0.5%top 58% das CVEs
exploração observada
nãonenhuma fonte reporta
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Jason Crouse, VeronaLabs Slimstat Analytics allows SQL Injection.This issue affects Slimstat Analytics: from n/a through 5.0.4.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:L
Produtos afetados
Jason Crouse, VeronaLabs · Slimstat Analytics
CVEs relacionadas — Jason Crouse, VeronaLabs Slimstat Analytics

No mesmo produto, das mais perigosas para as menos.

CVE-2023-40676MEDIUMWordPress Slimstat Analytics Plugin <= 5.0.8 is vulnerable to Cross Site Scripting (XSS)EPSS 0.4%CVE-2022-45366HIGHWordPress Slimstat Analytics Plugin <= 5.0.4 is vulnerable to Cross Site Scripting (XSS)EPSS 0.4%
Referências
https://patchstack.com/database/vulnerability/wp-slimstat/wordpress-slimstat-analytics-plugin-5-0-4-sql-injection-sqli-vulnerability?_s_id=cve