Lucene search
PRIOn knowledge basePRION:CVE-2021-4134HistoryFeb 16, 2022 - 5:15 p.m.
Sql injection
2022-02-1617:15:00
PRIOn knowledge base
www.prio-n.com
2
The Fancy Product Designer WordPress plugin is vulnerable to SQL Injection due to insufficient escaping and parameterization of the ID parameter found in the ~/inc/api/class-view.php file which allows attackers with administrative level permissions to inject arbitrary SQL queries to obtain sensitive information, in versions up to and including 4.7.4.
| CPE | Name | Operator | Version |
|---|---|---|---|
| fancy_product_designer | lt | 4.7.5 |
Related
cve
cve
CVE-2021-4134
2022-02-16 17:15:11
cvelist
cvelist
CVE-2021-4134 Fancy Product Designer <= 4.7.4 Admin+ SQL Injection
2022-02-16 16:38:05
nvd
nvd
CVE-2021-4134
2022-02-16 17:15:11
wpvulndb
wpvulndb
Fancy Product Designer < 4.7.5 - Admin+ SQL Injection
2022-02-08 00:00:00
cnvd
cnvd
WordPress plugin Fancy Product Designer SQL injection vulnerability
2022-02-18 00:00:00