CVE-2022-38538: Archerydms Archery

Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days.

Archery v1.7.0 to v1.8.5 was discovered to contain a SQL injection vulnerability via the checksum parameter in the report module.

Affected products

• Archerydms Archery: from 1.4.0, before 1.9.0 (fixed in 1.9.0)

Published 2022-09-13. Last modified 2026-06-17.