CVE-2022-4099

CRITICAL · CVSS 9.8 EPSS 1.04%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2023-01-02 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2022-4099

Severity

CRITICAL

CVSS

9.8

EPSS

1.04%

WordPress

Original NVD Description

The Joy Of Text Lite WordPress plugin before 2.3.1 does not properly sanitise and escape some parameters before using them in SQL statements accessible to unauthenticated users, leading to unauthenticated SQL injection