CVE-2022-2754

CVE-2022-2754: Ketchup Restaurant Reservations <= 1.0.0 - Unauthenticated Blind SQLi

Vendor Unknown

Product Ketchup Restaurant Reservations

Weakness CWE-89 · SQLi

Published September 19, 2022

Last update August 3, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The Ketchup Restaurant Reservations WordPress plugin through 1.0.0 does not validate and escape some reservation parameters before using them in SQL statements, which could allow unauthenticated attackers to perform SQL Injection attacks

Key dates

02Disclosure timeline

September 19, 2022 CVE published

August 3, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2022-2754 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/89.html