Lucene search
PRIOn knowledge basePRION:CVE-2021-25030HistoryJan 03, 2022 - 1:15 p.m.
Sql injection
2022-01-0313:15:00
PRIOn knowledge base
www.prio-n.com
4
0.001 Low
EPSS
Percentile
37.9%
The Events Made Easy WordPress plugin before 2.2.36 does not sanitise and escape the search_text parameter before using it in a SQL statement via the eme_searchmail AJAX action, available to any authenticated users. As a result, users with a role as low as subscriber can call it and perform SQL injection attacks
| CPE | Name | Operator | Version |
|---|---|---|---|
| events_made_easy | lt | 2.2.36 |
Related
cvelist
cvelist
CVE-2021-25030 Events Made Easy < 2.2.36 - Subscriber+ SQL Injection
2022-01-03 12:49:17
cnvd
cnvd
WordPress plugin Events Made Easy SQL injection vulnerability
2022-01-05 00:00:00
cve
cve
CVE-2021-25030
2022-01-03 13:15:09
wpexploit
wpexploit
Events Made Easy < 2.2.36 - Subscriber+ SQL Injection
2021-12-06 00:00:00
patchstack
patchstack
nvd
nvd
CVE-2021-25030
2022-01-03 13:15:09
wpvulndb
wpvulndb
Events Made Easy < 2.2.36 - Subscriber+ SQL Injection
2021-12-06 00:00:00