CVE-2021-24393

Name of the Vulnerable Software and Affected Versions Comment Highlighter WordPress plugin versions 0.13 and earlier

Description The issue arises from a c GET parameter in the Comment Highlighter WordPress plugin that is not properly sanitized, escaped, or validated before being inserted into a SQL statement, leading to SQL injection.

Recommendations For Comment Highlighter WordPress plugin versions 0.13 and earlier, update to a version that properly sanitizes, escapes, or validates the c GET parameter to prevent SQL injection. At the moment, there is no information about a newer version that contains a fix for this vulnerability.