CVE-2022-2312

MEDIUM 5.4CVE-2022-2312 · Published 22/08/2022 · updated 17/06/2026

In short

CVE-2022-2312 is a MEDIUM (CVSS 5.4) vulnerability affecting student result or employee database (student result or employee database project).
Chance of exploitation in the next 30 days (EPSS): 0.31%, higher than 24.4% of all vulnerabilities.
Fix: update to 1.7.5 or later.

Package	Affected versions	Patched versions
student result or employee database student_result_or_employee_database_project	`< 1.7.5`	`1.7.5`

Description

The Student Result or Employee Database WordPress plugin before 1.7.5 does not have CSRF in its AJAX actions, allowing attackers to make logged in user with a role as low as contributor to add/edit and delete students via CSRF attacks. Furthermore, due to the lack of sanitisation and escaping, it could also lead to Stored Cross-Site scripting

References

wpscan.com/vulnerability/7548c1fb-77b5-4290-a297-35820edfe0f8 · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free