Lucene search
PRIOn knowledge basePRION:CVE-2021-24403HistorySep 20, 2021 - 10:15 a.m.
Sql injection
2021-09-2010:15:00
PRIOn knowledge base
www.prio-n.com
4
0.001 Low
EPSS
Percentile
45.2%
The Orders functionality in the WordPress Page Contact plugin through 1.0 has an order_id parameter which is not sanitised, escaped or validated before inserting to a SQL statement, leading to SQL injection. The feature is available to low privilege users such as contributors
| CPE | Name | Operator | Version |
|---|---|---|---|
| wpagecontact | le | 1.0 |
Related
wpvulndb
wpvulndb
WordPress Page Contact <= 1.0 - Authenticated (editor+) SQL Injection
2021-08-22 00:00:00
cve
cve
CVE-2021-24403
2021-09-20 10:15:08
patchstack
patchstack
cvelist
cvelist
wpexploit
wpexploit
WordPress Page Contact <= 1.0 - Authenticated (editor+) SQL Injection
2021-08-22 00:00:00
nvd
nvd
CVE-2021-24403
2021-09-20 10:15:08