CVE-2022-44790

7.5 highEPSS 0.6%

High (7.5) in interspire email marketer. EPSS 0.6% chance of exploitation in the next 30 days.

Interspire Email Marketer through 6.5.1 allows SQL Injection via the surveys module. An unauthenticated attacker could successfully perform an attack to extract potentially sensitive information from the database if the survey id exists.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 50% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2022-12-09
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

interspire:email_marketer

References

https://www.interspire.com/security-bulletin-2022-44790/
https://www.interspire.com/security-bulletin-2022-44790/

Check your stack JSON