Lucene search
PRIOn knowledge basePRION:CVE-2021-24506HistoryAug 23, 2021 - 12:15 p.m.
Sql injection
2021-08-2312:15:00
PRIOn knowledge base
www.prio-n.com
14
The Slider Hero with Animation, Video Background & Intro Maker WordPress plugin before 8.2.7 does not sanitise or escape the id attribute of its hero-button shortcode before using it in a SQL statement, allowing users with a role as low as Contributor to perform SQL injection.
| CPE | Name | Operator | Version |
|---|---|---|---|
| slider_hero | lt | 8.2.7 |
Related
cve
cve
CVE-2021-24506
2021-08-23 12:15:09
patchstack
patchstack
WordPress Slider Hero plugin <= 8.2.6 - SQL Injection (SQLi) vulnerability
2021-07-26 00:00:00
cvelist
cvelist
CVE-2021-24506 Slider Hero < 8.2.7 - Contributor+ SQL Injection
2021-08-23 11:09:58
wpvulndb
wpvulndb
Slider Hero < 8.2.7 - Contributor+ SQL Injection
2021-07-26 00:00:00
wpexploit
wpexploit
Slider Hero < 8.2.7 - Contributor+ SQL Injection
2021-07-26 00:00:00
nvd
nvd
CVE-2021-24506
2021-08-23 12:15:09