Lucene search
WPScanCVELIST:CVE-2022-4050HistoryDec 19, 2022 - 1:41 p.m.
CVE-2022-4050 JoomSport < 5.2.8 - Unauthenticated SQLi
2022-12-1913:41:51
WPScan
www.cve.org
joomsport wordpress plugin
sql injection
unauthenticated users
cve-2022-4050
security vulnerability
0.071 Low
EPSS
Percentile
94.0%
The JoomSport WordPress plugin before 5.2.8 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by unauthenticated users
CNA Affected
[
{
"vendor": "Unknown",
"product": "JoomSport",
"collectionURL": "https://wordpress.org/plugins",
"versions": [
{
"status": "affected",
"versionType": "custom",
"version": "0",
"lessThan": "5.2.8"
}
],
"defaultStatus": "unaffected"
}
]Related
cve
cve
CVE-2022-4050
2022-12-19 14:15:11
nvd
nvd
CVE-2022-4050
2022-12-19 14:15:11
prion
prion
Sql injection
2022-12-19 14:15:00
wpvulndb
wpvulndb
JoomSport < 5.2.8 - Unauthenticated SQLi
2022-11-28 00:00:00
nuclei
nuclei
WordPress JoomSport <5.2.8 - SQL Injection
2022-12-13 14:22:56
wpexploit
wpexploit
JoomSport < 5.2.8 - Unauthenticated SQLi
2022-11-28 00:00:00