CVE-2022-24992

A vulnerability in the component process.php of QR Code Generator v5.2.7 allows attackers to perform directory traversal.

CVSS v3.1

7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

1.47% chance of exploitation in the next 30 days, 72th percentile

Published

2022-07-25

Updated

2026-07-09

Proof-of-concept exploits (3)

• https://n0lsec.medium.com/qrcdr-path-traversal-vulnerability-bb89acc0c100
• n0lsec1337/CVE-2022-249920★ · 2025-11-24
• n0lsecurity/CVE-2022-249920★ · 2025-11-24

References

• CVE Record
• NVD entry

Related

• CVE-2022-24990
• CVE-2022-24995
• CVE-2022-24989
• CVE-2022-24999
• CVE-2022-24977
• CVE-2022-25003