CVE-2022-2559 Fluent Support < 1.5.8 - Admin+ SQLi

2022-08-2917:15:36

CWE-89

WPScan

www.cve.org

cve-2022-2559

fluent support

sql injection

wordpress plugin

0.001 Low

EPSS

Percentile

38.0%

JSON

The Fluent Support WordPress plugin before 1.5.8 does not properly sanitise, validate and escape various parameters before using them in an SQL statement, leading to an SQL Injection vulnerability exploitable by high privilege users

CNA Affected

[
  {
    "product": "Fluent Support – WordPress Helpdesk and Customer Support Ticket Plugin",
    "vendor": "Unknown",
    "versions": [
      {
        "lessThan": "1.5.8",
        "status": "affected",
        "version": "1.5.8",
        "versionType": "custom"
      }
    ]
  }
]

References

wpscan.com/vulnerability/062599ce-c630-487e-bb43-c3b27a62b9ec

0.001 Low

EPSS

Percentile

38.0%

JSON

Related for CVELIST:CVE-2022-2559