Lucene search
PRIOn knowledge basePRION:CVE-2021-24889HistoryNov 29, 2021 - 9:15 a.m.
Sql injection
2021-11-2909:15:00
PRIOn knowledge base
www.prio-n.com
8
0.001 Low
EPSS
Percentile
37.9%
The Ninja Forms Contact Form WordPress plugin before 3.6.4 does not escape keys of the fields POST parameter, which could allow high privilege users to perform SQL injections attacks
| CPE | Name | Operator | Version |
|---|---|---|---|
| ninja_forms | lt | 3.6.4 |
Related
cve
cve
CVE-2021-24889
2021-11-29 09:15:07
cnvd
cnvd
WordPress Plugin SQL Injection Vulnerability (CNVD-2021-102399)
2021-12-01 00:00:00
wpvulndb
wpvulndb
Ninja Forms < 3.6.4 - Admin+ SQL Injection
2021-10-26 00:00:00
openvas
openvas
WordPress Ninja Forms Plugin < 3.6.4 SQLi Vulnerability
2021-12-06 00:00:00
wpexploit
wpexploit
Ninja Forms < 3.6.4 - Admin+ SQL Injection
2021-10-26 00:00:00
nvd
nvd
CVE-2021-24889
2021-11-29 09:15:07
patchstack
patchstack
cvelist
cvelist
CVE-2021-24889 Ninja Forms < 3.6.4 - Admin+ SQL Injection
2021-11-29 08:25:45