CVE-2022-36030

Project-nexus is a general-purpose blog website framework. Affected versions are subject to SQL injection due to a lack of sensitization of user input. This issue has not yet been patched. Users are advised to restrict user input and to upgrade when a new release becomes available.

• CWE-89

• https://github.com/vinsdragonis/Project-Nexus/security/advisories/GHSA-3pv7-25cc-mjvvThird Party Advisory
• https://github.com/vinsdragonis/Project-Nexus/security/advisories/GHSA-3pv7-25cc-mjvvThird Party Advisory

Published

Aug 20, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-36025Besu is a Java-based Ethereum client. In versions newer than…9.1
• CVE-2022-36026TensorFlow is an open source platform for machine learning. …7.5
• CVE-2022-36027TensorFlow is an open source platform for machine learning. …7.5
• CVE-2022-36028Greenlight is an end-user interface for BigBlueButton server…6.1
• CVE-2022-36029Greenlight is an end-user interface for BigBlueButton server…6.1
• CVE-2022-3603The Export customers list csv for WooCommerce, WordPress use…9.8
• CVE-2022-36031Directus is a free and open-source data platform for headles…6.5
• CVE-2022-36032ReactPHP HTTP is a streaming HTTP client and server implemen…5.3
• CVE-2022-36033jsoup is a Java HTML parser, built for HTML editing, cleanin…6.1
• CVE-2022-36034nitrado.js is a type safe wrapper for the Nitrado API. Possi…7.5
• CVE-2022-36035Flux is a tool for keeping Kubernetes clusters in sync with …7.8
• CVE-2022-36036mdx-mermaid provides plug and play access to Mermaid in MDX.…7.8