Lucene search
PRIOn knowledge basePRION:CVE-2021-24952HistoryMar 07, 2022 - 9:15 a.m.
Sql injection
2022-03-0709:15:00
PRIOn knowledge base
www.prio-n.com
3
The Conversios.io WordPress plugin before 4.6.2 does not sanitise, validate and escape the sync_progressive_data parameter for the tvcajax_product_sync_bantch_wise AJAX action before using it in a SQL statement, allowing any authenticated user to perform SQL injection attacks.
| CPE | Name | Operator | Version |
|---|---|---|---|
| conversios.io | lt | 4.6.2 |
Related
cvelist
cvelist
CVE-2021-24952 Conversios.io < 4.6.2 - Subscriber+ SQL Injection
2022-03-07 08:16:08
cve
cve
CVE-2021-24952
2022-03-07 09:15:08
cnvd
cnvd
WordPress Conversios.io plugin SQL injection vulnerability
2022-03-09 00:00:00
wpexploit
wpexploit
Conversios.io < 4.6.2 - Subscriber+ SQL Injection
2022-02-01 00:00:00
nvd
nvd
CVE-2021-24952
2022-03-07 09:15:08
wpvulndb
wpvulndb
Conversios.io < 4.6.2 - Subscriber+ SQL Injection
2022-02-01 00:00:00
patchstack
patchstack
WordPress Conversios.io plugin <= 4.6.1 - SQL Injection (SQLi) vulnerability
2022-02-01 00:00:00