Critical severity9.8NVD Advisory· Published Aug 20, 2022· Updated Jun 17, 2026

CVE-2022-36030

Description

Project-nexus is a general-purpose blog website framework. Affected versions are subject to SQL injection due to a lack of sensitization of user input. This issue has not yet been patched. Users are advised to restrict user input and to upgrade when a new release becomes available.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Project Nexus/Project-nexusllm-create
vinsdragonis/Project-Nexuscpe-rescue
Range: <= 1.0.1

Patches

Vulnerability mechanics

References

github.com/vinsdragonis/Project-Nexus/security/advisories/GHSA-3pv7-25cc-mjvvnvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000