CVE-2022-30813

Name of the Vulnerable Software and Affected Versions elitecms version 1.01

Description The issue concerns SQL Injection, which can be exploited via the "/admin/add post.php" API endpoint. This allows for potential unauthorized access to database information.

Recommendations For elitecms version 1.01, consider restricting access to the "/admin/add post.php" endpoint until a patch is available. As a temporary workaround, review and validate all user input to prevent malicious SQL commands. At the moment, there is no information about a newer version that contains a fix for this vulnerability.