The Wow Countdowns WordPress plugin through 3.1.2 does not sanitize user input into the 'did' parameter and uses it in a SQL statement, leading to an authenticated SQL Injection...
7.2CVSS7AI score0.01306EPSS
SaveExploits2References1
NVD•added 2022/05/03 5:15 p.m.•22 views
CVE-2022-27962
Bluecms 1.6 has a SQL injection vulnerability at cooike...