WorkOrder CMS vulnerabilities

1 known vulnerability in WorkOrder CMS from WorkOrder. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.2 High severity

  WorkOrder CMS: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2023-54340Jan 13, 2026WorkOrder

  WorkOrder CMS 0.1.0 contains a SQL injection vulnerability that allows unauthenticated attackers to bypass login by manipulating username and password parameters. Attackers can inject malicious SQL queries using techniques like OR '1'='1' and stacked queries t