CVE-2023-54333CWE-89

Social-Share-Buttons 2.2.3 - SQL Injection via project_id Parameter

High · published January 13, 2026

CVSS v4.0
8.8
EPSS
0%
Percentile
21.0
In the wild
Unconfirmed
What it is

🚨 A single malicious POST request is all it takes to access your entire database! This SQL injection vulnerability in Social-Share-Buttons 2.2.3 is a serious wake-up call! 🔥 Think of it like a restaurant where a diner can swap out their meal ticket for anything they want. Instead of ordering a burger, they sneakily write in a lobster feast, and the kitchen has no idea! That's what this SQL injection allows attackers to do with your database queries. If exploited, attackers can manipulate the project_id parameter to run rogue SQL commands, potentially giving them access to sensitive data or even the entire database. This could lead to data breaches, financial losses, and a trove of stolen information that could devastate your business. Protecting against this vulnerability is not just important—it's critical!

Put simply

Think of it like a restaurant where a diner can swap out their meal ticket for anything they want. Instead of ordering a burger, they sneakily write in a lobster feast, and the kitchen has no idea! That's what this SQL injection allows attackers to do with your database queries. This vulnerability allows attackers to inject malicious SQL queries through crafted POST requests targeting the project_id parameter in Social-Share-Buttons 2.2.3. As a result, they can manipulate database queries and gain unauthorized access to sensitive information.

What to do

If exploited, attackers can manipulate the project_id parameter to run rogue SQL commands, potentially giving them access to sensitive data or even the entire database. This could lead to data breaches, financial losses, and a trove of stolen information that could devastate your business. Protecting against this vulnerability is not just important—it's critical! To protect yourself, immediately update to the latest version of Social-Share-Buttons. Implement input validation and prepared statements to secure your database queries and reduce the risk of SQL injection. Don't wait—secure your application now! You've got this! By following these steps, you'll boost your security and keep your database safe! 🛡️

The record
Technical detail
CVSS v4.0
8.8 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N
EPSS
0.00295 · 21.0th percentile
Weakness
CWE-89 · Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Published
2026-01-13T22:56Z
EPSS history
Timeline
  • 13 JAN 22:56Z
    Social-Share-Buttons 2.2.3 - SQL Injection via project_id Parameter
    cvelistv5