CVE-2022-4099

Joy Of Text Lite < 2.3.1 - Unauthenticated SQLi

The Joy Of Text Lite WordPress plugin before 2.3.1 does not properly sanitise and escape some parameters before using them in SQL statements accessible to unauthenticated users, leading to unauthenticated SQL injection

Affected

Joy Of Text Lite

CVSS v3.1 NVD

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

1.05% chance of exploitation in the next 30 days, 64th percentile

Published

2023-01-02

Updated

2025-04-10

Proof-of-concept exploits (1)

• https://wpscan.com/vulnerability/a282dd39-926d-406b-b8f5-e4c6e0c2c028

References

• CVE Record
• NVD entry