CVE-2022-38541: Archerydms Archery

Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days.

Archery v1.8.3 to v1.8.5 was discovered to contain multiple SQL injection vulnerabilities via the start_time and stop_time parameters in the my2sql interface.

Affected products

• Archerydms Archery: from 1.8.3, up to and including 1.8.5

Published 2022-09-13. Last modified 2026-06-17.