Lucene search
WPScanCVELIST:CVE-2021-24143HistoryMar 18, 2021 - 2:57 p.m.
CVE-2021-24143 AccessPress Social Icons < 1.8.1 - Authenticated SQL Injection
2021-03-1814:57:50
CWE-89
WPScan
www.cve.org
2
cve-2021-24143
accesspress social icons
sql injection
unvalidated input
widget attribute
post permission
Unvalidated input in the AccessPress Social Icons plugin, versions before 1.8.1, did not sanitise its widget attribute, allowing accounts with post permission, such as author, to perform SQL injections.
CNA Affected
[
{
"product": "AccessPress Social Icons",
"vendor": "Unknown",
"versions": [
{
"lessThan": "1.8.1",
"status": "affected",
"version": "1.8.1",
"versionType": "custom"
}
]
}
]Related
prion
prion
Sql injection
2021-03-18 15:15:00
wpexploit
wpexploit
AccessPress Social Icons < 1.8.1 - Authenticated SQL Injection
2020-11-02 00:00:00
nvd
nvd
CVE-2021-24143
2021-03-18 15:15:15
wpvulndb
wpvulndb
AccessPress Social Icons < 1.8.1 - Authenticated SQL Injection
2020-11-02 00:00:00
cve
cve
CVE-2021-24143
2021-03-18 15:15:15