CVE-2022-28512: Fantastic Blog Project Fantastic Blog

Critical severity, CVSS 9.8. EPSS: 1.4% chance of exploitation in the next 30 days.

A SQL injection vulnerability exists in Sourcecodester Fantastic Blog CMS 1.0 . An attacker can inject query in "/fantasticblog/single.php" via the "id=5" parameters.

Affected products

• Fantastic Blog Project Fantastic Blog: version 1.0 only

Published 2022-05-04. Last modified 2026-06-17.