Sunnytoo

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Sunnytoo records in CISA KEV

No Sunnytoo vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Stblogsearch · all components

TI-2023-23585 CVE-2023-43985 · GHSA-h7h5-c3fr-4rj2

MEDIUM 49

SunnyToo stblogsearch up to v1.0.0 was discovered to contain a SQL injection vulnerability via the StBlogSearchClass::prepareSearch component.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00518 Published 2024-01-19 No fix listed CWE-89