CVE-2022-2559

Fluent Support < 1.5.8 - Admin+ SQLi

The Fluent Support WordPress plugin before 1.5.8 does not properly sanitise, validate and escape various parameters before using them in an SQL statement, leading to an SQL Injection vulnerability exploitable by high privilege users

Affected

Fluent Support – WordPress Helpdesk and Customer Support Ticket Plugin

CVSS v3.1 NVD

7.2 HIGHCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS

1.21% chance of exploitation in the next 30 days, 68th percentile

Published

2022-08-29

Updated

2024-08-03

Proof-of-concept exploits (1)

• https://wpscan.com/vulnerability/062599ce-c630-487e-bb43-c3b27a62b9ec

References

• CVE Record
• NVD entry