← Back to browse · API

CVE-2022-4050

Severity
CRITICAL
CVSS
9.8
EPSS
0.04756
Risk score
40.86
CISA KEV
No
PoC
No
Published
2022-12-19
Modified
2025-04-17
First seen
2026-08-07
Aliases
EUVD-2022-51427, GHSA-JW82-36J2-HQQJ
Products
Unknown:JoomSport 0 <5.2.8
Sources
euvd EUVD-2022-51427

Description

The JoomSport WordPress plugin before 5.2.8 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by unauthenticated users

References