PT-2021-15884
CVE-2021-24348
·
تاريخ النشر
2021-06-14
·
تاريخ التحديث
2021-06-21
الوصف من
CVSS 3.1
7.2
عاليةالمقاييسAV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Side Menu – add fixed side buttons WordPress plugin versions prior to 3.1.5
Description
The issue concerns the menu delete functionality, which is accessible to Administrator users. It takes the
did GET parameter and uses it in an SQL statement without proper sanitization, validation, or escaping, leading to a SQL Injection issue.Recommendations
For versions prior to 3.1.5, update to version 3.1.5 or later to resolve the issue. As a temporary workaround, consider restricting access to the menu delete functionality to minimize the risk of exploitation.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾