CVE-2022-37333: Exceedone Exment

High severity, CVSS 8.8. EPSS: 1.4% chance of exploitation in the next 30 days.

SQL injection vulnerability in the Exment ((PHP8) exceedone/exment v5.0.2 and earlier and exceedone/laravel-admin v3.0.0 and earlier, (PHP7) exceedone/exment v4.4.2 and earlier and exceedone/laravel-admin v2.2.2 and earlier) allows remote authenticated attackers to execute arbitrary SQL commands.

Affected products

• Exceedone Exment: up to and including 5.0.2
• Exceedone Laravel-Admin: up to and including 3.0.0

Published 2022-08-24. Last modified 2026-06-17.