QwikSec

Security Database

CVE

CWE

Training

CVE-2022-0786

Published: Jun 13, 2022

Modified: Aug 2, 2024

PUBLISHED

Description

The KiviCare WordPress plugin before 2.3.9 does not sanitise and escape some parameters before using them in SQL statements via the ajax_post AJAX action with the get_doctor_details route, leading to SQL Injections exploitable by unauthenticated users

Vendor	Product	Versions
Unknown	KiviCare – Clinic & Patient Management System (EHR)	affected `2.3.9 - < 2.3.9`

Weaknesses (CWE)

References

https://wpscan.com/vulnerability/53f493e9-273b-4349-8a59-f2207e8f8f30

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.