CVE-2022-45373

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2022-45373

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-45373.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2022-45373

Published

2023-11-06T08:15:21.547Z

Modified

2025-11-20T12:10:50.153213Z

Severity

9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator

Summary

[none]

Details

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Jason Crouse, VeronaLabs Slimstat Analytics allows SQL Injection.This issue affects Slimstat Analytics: from n/a through 5.0.4.

References

https://patchstack.com/database/vulnerability/wp-slimstat/wordpress-slimstat-analytics-plugin-5-0-4-sql-injection-sqli-vulnerability?_s_id=cve

Affected packages

Git / github.com/wp-slimstat/wp-slimstat

Affected ranges

Type: GIT
Repo: https://github.com/wp-slimstat/wp-slimstat
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Fixed

ecc3d3c18f94178b90607d01bd5cb03259e685fc

Affected versions

4.*

4.8.1

4.8.2

4.8.3

4.8.4

4.8.6.1

4.8.7

4.8.7.1

4.8.7.2

4.8.8.2

4.9

4.9.0.1

v4.*

v4.9.2

v4.9.3

v4.9.3.1

v4.9.3.2

v4.9.3.3

v4.9.4

v5.*

v5.0

v5.0.1

v5.0.2

v5.0.3

v5.0.4

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-45373.json"