CVE-2022-32301

YoudianCMS v9.5.0 was discovered to contain a SQL injection vulnerability via the IdList parameter at /App/Lib/Action/Home/ApiAction.class.php.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2022-06-15

Last modified

2024-08-03

Weaknesses

CWE-89

Affected products

• Youdiancms (Youdiancms)

References

• https://www.yuque.com/docs/share/8864c0c7-ad8e-407f-98d3-104d2f2dd13e