{"id":"CVE-2022-24992","aliases":["EUVD-2022-29739","GHSA-wqrx-pvqc-vp73"],"status":"published","title":"A vulnerability in the component process.php of QR Code Generator v5.2.7 allows attackers to...","description":"A vulnerability in the component process.php of QR Code Generator v5.2.7 allows attackers to perform directory traversal.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.01527,"percentile":0.74886,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-22"],"published":"2022-07-25T17:39:35Z","modified":"2026-07-09T01:17:18Z","exploits":[{"source":"pocgithub","id":"esistferry/CVE-2022-24992","title":"esistferry/CVE-2022-24992","date":"2023-07-11","url":"https://github.com/esistferry/CVE-2022-24992"}],"products":[{"vendor":"qr_code_generator_project","product":"qr_code_generator"}],"references":[{"url":"https://codecanyon.net/item/qrcdr-responsive-qr-code-generator/9226839","tags":["x_refsource_MISC","x_transferred","Product"]},{"url":"https://n0lsec.medium.com/qrcdr-path-traversal-vulnerability-bb89acc0c100","tags":["x_refsource_MISC","x_transferred","Exploit","Mitigation","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-24992"},{"url":"http://qrcdr.com"},{"url":"https://github.com/advisories/GHSA-wqrx-pvqc-vp73"}],"sources":{"cve":[{"id":"CVE-2022-24992","description":"A vulnerability in the component process.php of QR Code Generator v5.2.7 allows attackers to perform directory traversal.","status":"published","published":"2022-07-25T17:39:35Z","modified":"2026-07-09T00:17:23.125Z","updated_at":"2026-11-02T14:34:34.940806Z"}],"euvd":[{"id":"EUVD-2022-29739","description":"A vulnerability in the component process.php of QR Code Generator v5.2.7 allows attackers to perform directory traversal.","status":"published","published":"2022-07-25T17:39:35Z","modified":"2026-07-09T00:17:23Z","updated_at":"2026-11-02T18:20:08.115071Z"}],"ghsa":[{"id":"GHSA-wqrx-pvqc-vp73","title":"A vulnerability in the component process.php of QR Code Generator v5.2.7 allows attackers to...","description":"A vulnerability in the component process.php of QR Code Generator v5.2.7 allows attackers to perform directory traversal.","status":"published","published":"2022-07-26T00:00:29Z","modified":"2023-01-27T05:07:06Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T14:43:03.385033Z"}],"nvd":[{"id":"CVE-2022-24992","description":"A vulnerability in the component process.php of QR Code Generator v5.2.7 allows attackers to perform directory traversal.","status":"published","published":"2022-07-25T18:22:19.27Z","modified":"2026-07-09T01:17:18.37Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T14:07:24.037422Z"}]}}