{"containers": {"cna": {"affected": [{"product": "Documentor \u2013 Create Product Documentation", "vendor": "Unknown", "versions": [{"lessThanOrEqual": "1.5.3", "status": "affected", "version": "1.5.3", "versionType": "custom"}]}], "credits": [{"lang": "en", "value": "cydave"}], "descriptions": [{"lang": "en", "value": "The Documentor WordPress plugin through 1.5.3 fails to sanitize and escape user input before it is being interpolated in an SQL statement and then executed, leading to an SQL Injection exploitable by unauthenticated users."}], "problemTypes": [{"descriptions": [{"cweId": "CWE-89", "description": "CWE-89 SQL Injection", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"dateUpdated": "2022-05-02T16:05:43", "orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", "shortName": "WPScan"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://wpscan.com/vulnerability/55b89de0-30ed-4f98-935e-51f069faf6fc"}], "source": {"discovery": "EXTERNAL"}, "title": "Documentor <= 1.5.3 - Unauthenticated SQLi", "x_generator": "WPScan CVE Generator", "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "contact@wpscan.com", "ID": "CVE-2022-0773", "STATE": "PUBLIC", "TITLE": "Documentor <= 1.5.3 - Unauthenticated SQLi"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "Documentor \u2013 Create Product Documentation", "version": {"version_data": [{"version_affected": "<=", "version_name": "1.5.3", "version_value": "1.5.3"}]}}]}, "vendor_name": "Unknown"}]}}, "credit": [{"lang": "eng", "value": "cydave"}], "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "The Documentor WordPress plugin through 1.5.3 fails to sanitize and escape user input before it is being interpolated in an SQL statement and then executed, leading to an SQL Injection exploitable by unauthenticated users."}]}, "generator": "WPScan CVE Generator", "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "CWE-89 SQL Injection"}]}]}, "references": {"reference_data": [{"name": "https://wpscan.com/vulnerability/55b89de0-30ed-4f98-935e-51f069faf6fc", "refsource": "MISC", "url": "https://wpscan.com/vulnerability/55b89de0-30ed-4f98-935e-51f069faf6fc"}]}, "source": {"discovery": "EXTERNAL"}}}}, "cveMetadata": {"assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", "assignerShortName": "WPScan", "cveId": "CVE-2022-0773", "datePublished": "2022-05-02T16:05:43", "dateReserved": "2022-02-27T00:00:00", "dateUpdated": "2022-05-02T16:05:43", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.0"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:documentor_project:documentor:*:*:*:*:*:wordpress:*:*", "matchCriteriaId": "40621D84-1AF7-4F54-BE21-C150D4EBBA5F", "versionEndIncluding": "1.5.3", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "The Documentor WordPress plugin through 1.5.3 fails to sanitize and escape user input before it is being interpolated in an SQL statement and then executed, leading to an SQL Injection exploitable by unauthenticated users."}, {"lang": "es", "value": "El plugin Documentor de WordPress versiones hasta 1.5.3, no sanea ni escapa de la entrada del usuario antes de interpolarla en una sentencia SQL y ejecutarla, conllevando a una inyecci\u00f3n SQL explotable por usuarios no autenticados"}], "id": "CVE-2022-0773", "lastModified": "2022-05-09T15:01:55.217", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2022-05-02T16:15:08.517", "references": [{"source": "contact@wpscan.com", "tags": ["Exploit", "Third Party Advisory"], "url": "https://wpscan.com/vulnerability/55b89de0-30ed-4f98-935e-51f069faf6fc"}], "sourceIdentifier": "contact@wpscan.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-89"}], "source": "nvd@nist.gov", "type": "Primary"}, {"description": [{"lang": "en", "value": "CWE-89"}], "source": "contact@wpscan.com", "type": "Secondary"}]}

{}