Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
prionPRIOn knowledge basePRION:CVE-2021-24341
HistoryJun 14, 2021 - 2:15 p.m.

Sql injection

2021-06-1414:15:00
PRIOn knowledge base
www.prio-n.com
2

8.9 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

40.5%

JSON

When deleting a date in the Xllentech English Islamic Calendar WordPress plugin before 2.6.8, the year_number and month_number POST parameters are not sanitised, escaped or validated before being used in a SQL statement, leading to SQL injection.

CPENameOperatorVersion
english_islamic_calendarlt2.6.8

Related

patchstack 1
cnvd 1
wpvulndb 1
cvelist 1
nvd 1
wpexploit 1
cve 1
patchstack
patchstack
WordPress Xllentech English Islamic Calendar plugin <= 2.6.7 - Authenticated SQL Injection (SQLi) vulnerability
2021-05-27 00:00:00
cnvd
cnvd
WordPress Xllentech English Islamic Calendar plugin SQL injection vulnerability
2021-06-15 00:00:00
wpvulndb
wpvulndb
Xllentech English Islamic Calendar < 2.6.8 - Authenticated SQL Injection
2021-05-27 00:00:00
cvelist
cvelist
CVE-2021-24341 Xllentech English Islamic Calendar < 2.6.8 - Authenticated SQL Injection
2021-06-14 13:37:12
nvd
nvd
CVE-2021-24341
2021-06-14 14:15:08
wpexploit
wpexploit
Xllentech English Islamic Calendar < 2.6.8 - Authenticated SQL Injection
2021-05-27 00:00:00
cve
cve
CVE-2021-24341
2021-06-14 14:15:08

8.9 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

40.5%

JSON
Related for PRION:CVE-2021-24341
patchstack1cnvd1wpvulndb1cvelist1nvd1wpexploit1cve1