PT-2021-15927
CVE-2021-24394
·
تاريخ النشر
2021-09-06
·
تاريخ التحديث
2021-09-09
الوصف من
CVSS 3.1
7.2
عاليةالمقاييسAV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Easy Testimonial Manager WordPress plugin versions 1.2.0 and earlier
Description
The issue is related to the
id GET parameter in the Easy Testimonial Manager WordPress plugin, which is not properly sanitized, escaped, or validated before being inserted into a SQL statement. This leads to SQL injection.Recommendations
For versions 1.2.0 and earlier, update to a version that properly sanitizes the
id GET parameter to prevent SQL injection.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.قابلية الاستغلال
استغلال
التأثيرات
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾