Lucene search
HistoryJun 20, 2024 - 6:15 a.m.
CVE-2024-5522
html5 video player
wordpress plugin
sql injection
0.0004 Low
EPSS
Percentile
9.1%
The HTML5 Video Player WordPress plugin before 2.5.27 does not sanitize and escape a parameter from a REST route before using it in a SQL statement, allowing unauthenticated users to perform SQL injection attacks
Related
wpvulndb
wpvulndb
HTML5 Video Player < 2.5.27 - Unauthenticated SQLi
2024-05-30 00:00:00
cve
cve
CVE-2024-5522
2024-06-20 06:15:10
wpexploit
wpexploit
HTML5 Video Player < 2.5.27 - Unauthenticated SQLi
2024-05-30 00:00:00
vulnrichment
vulnrichment
CVE-2024-5522 HTML5 Video Player < 2.5.27 - Unauthenticated SQLi
2024-06-20 06:00:04
cvelist
cvelist
CVE-2024-5522 HTML5 Video Player < 2.5.27 - Unauthenticated SQLi
2024-06-20 06:00:04
githubexploit
githubexploit
Exploit for CVE-2024-5522
2024-05-31 04:41:46
wordfence
wordfence