CVE-2023-54340: Workorder CMS

High severity, CVSS 8.2. EPSS: 0.3% chance of exploitation in the next 30 days.

WorkOrder CMS 0.1.0 contains a SQL injection vulnerability that allows unauthenticated attackers to bypass login by manipulating username and password parameters. Attackers can inject malicious SQL queries using techniques like OR '1'='1' and stacked queries to access database information or execute administrative commands.

Affected products

• Workorder Workorder CMS: version 0.1.0 only

Published 2026-01-13. Last modified 2026-06-17.