CVE-2024-22983: Projectworlds Visitor Management System

High severity, CVSS 8.1. EPSS: 0.8% chance of exploitation in the next 30 days.

SQL injection vulnerability in Projectworlds Visitor Management System in PHP v.1.0 allows a remote attacker to escalate privileges via the name parameter in the myform.php endpoint.

Affected products

• Projectworlds Visitor Management System: version 1.0 only

Published 2024-02-28. Last modified 2026-07-09.