Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

1 record

Vendor: catalyst2020 Clear all filters
TI-2025-04499 CVE-2025-5017 · GHSA-8622-4f89-rc6w

Catalyst Connect Zoho CRM Client Portal <= 2.2.0 - Authenticated (Administrator+) SQL Injection via uid Parameter

Priority MEDIUM 56

The Catalyst Connect Zoho CRM Client Portal plugin for WordPress is vulnerable to time-based SQL Injection via the ‘uid’ parameter in all versions up to, and including, 2.2.0 due to insufficient escaping on the user supp…

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00323 Published 2026-07-11 No fix listed CWE-89