CVE-2022-28111: Pagehelper Project Pagehelper

Critical severity, CVSS 9.8. EPSS: 1.7% chance of exploitation in the next 30 days.

MyBatis PageHelper v1.x.x-v3.7.0 v4.0.0-v5.0.0,v5.1.0-v5.3.0 was discovered to contain a time-blind SQL injection vulnerability via the orderBy parameter.

Affected products

• Pagehelper Project Pagehelper: from 1.0, up to and including 3.7.0; from 4.0.0, up to and including 5.0.0; from 5.1.0, up to and including 5.3.0

Published 2022-05-04. Last modified 2026-06-17.