CVE-2022-21644: Useful Simple Open-Source CMS Project Useful Simple Open-Source CMS

High severity, CVSS 7.2. EPSS: 1% chance of exploitation in the next 30 days.

USOC is an open source CMS with a focus on simplicity. In affected versions USOC allows for SQL injection via usersearch.php. In search terms provided by the user were not sanitized and were used directly to construct a sql statement. The only users permitted to search are site admins. Users are advised to upgrade as soon as possible. There are not workarounds for this issue.

Affected products

• Useful Simple Open-Source CMS Project Useful Simple Open-Source CMS: before pb2.4bfx2 (fixed in pb2.4bfx2)

Published 2022-01-04. Last modified 2026-06-17.