CVE-2021-44567: Rosariosis

Critical severity, CVSS 9.8. EPSS: 23.1% chance of exploitation in the next 30 days.

An unauthenticated SQL Injection vulnerability exists in RosarioSIS before 7.6.1 via the votes parameter in ProgramFunctions/PortalPollsNotes.fnc.php.

Affected products

• Rosariosis Rosariosis: before 7.6.1 (fixed in 7.6.1)

Published 2022-02-24. Last modified 2026-06-17.