CVE-2022-3720

Event Monster < 1.2.1 - Admin+ SQLi

High · published November 21, 2022

CVSS v3.1
7.2
EPSS
1%
Percentile
63.7
In the wild
Unconfirmed
What it is

The Event Monster WordPress plugin before 1.2.0 does not validate and escape some parameters before using them in SQL statements, which could lead to SQL Injection exploitable by high privilege users

The record
Technical detail
CVSS v3.1
7.2 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01039 · 63.7th percentile
Published
2022-11-21T00:00Z
EPSS history
Timeline
  • 21 NOV 00:00Z
    Event Monster < 1.2.1 - Admin+ SQLi
    cvelistv5