CVE-2022-41377

CVE-2022-41377 affects Online Pet Shop We App v1.0. The vulnerability is a SQL injection in the id parameter of the endpoint /pet_shop/admin/?page=maintenance/manage_category. Per CVSS v3.1, it has AV:N, AC:L, PR:H, UI:N, S:U, C:H, I:H, A:H (base score 7.2, HIGH). Exploitation requires high privi...