Lucene search
PRIOn knowledge basePRION:CVE-2021-24858HistoryJan 24, 2022 - 8:15 a.m.
Sql injection
2022-01-2408:15:00
PRIOn knowledge base
www.prio-n.com
7
0.001 Low
EPSS
Percentile
37.7%
The Cookie Notification Plugin for WordPress plugin before 1.0.9 does not sanitise or escape the id GET parameter before using it in a SQL statement, when retrieving the setting to edit in the admin dashboard, leading to an authenticated SQL Injection
| CPE | Name | Operator | Version |
|---|---|---|---|
| wp_cookie_user_info | lt | 1.0.9 |
Related
nvd
nvd
CVE-2021-24858
2022-01-24 08:15:08
cnvd
cnvd
WordPress Cookie Notification Plugin Plugin SQL Injection Vulnerability
2022-01-26 00:00:00
cvelist
cvelist
CVE-2021-24858 WP Cookie User Info < 1.0.9 - Admin+ SQL Injection
2022-01-24 08:00:50
cve
cve
CVE-2021-24858
2022-01-24 08:15:08
patchstack
patchstack
wpexploit
wpexploit
WP Cookie User Info < 1.0.9 - Admin+ SQL Injection
2021-12-27 00:00:00
wpvulndb
wpvulndb
WP Cookie User Info < 1.0.9 - Admin+ SQL Injection
2021-12-27 00:00:00