CVE-2021-25007

The MOLIE WordPress plugin through 0.5 does not validate and escape a post parameter before using in a SQL statement, leading to an SQL Injection...

CVE-2021-25006

The MOLIE WordPress plugin through 0.5 does not escape the courseid parameter before outputting it back in the admin dashboard, leading to a Reflected Cross-Site Scripting issue...

CVE-2021-25006

The MOLIE WordPress plugin through 0.5 does not escape the courseid parameter before outputting it back in the admin dashboard, leading to a Reflected Cross-Site Scripting issue...

CVE-2021-25006

The MOLIE WordPress plugin through 0.5 does not escape the courseid parameter before outputting it back in the admin dashboard, leading to a Reflected Cross-Site Scripting issue...

CVE-2021-25007

The MOLIE WordPress plugin through 0.5 does not validate and escape a post parameter before using in a SQL statement, leading to an SQL Injection...

CVE-2021-25007

The MOLIE WordPress plugin through 0.5 does not validate and escape a post parameter before using in a SQL statement, leading to an SQL Injection...

Sql injection

The MOLIE WordPress plugin through 0.5 does not validate and escape a post parameter before using in a SQL statement, leading to an SQL Injection...

PT-2022-9563

Name of the Vulnerable Software and Affected Versions MOLIE WordPress plugin versions 0.5 and earlier Description The issue is related to a Reflected Cross-Site Scripting problem. It occurs because the course id parameter is not properly escaped before being outputted back in the admin dashboard...

PT-2022-9564

Name of the Vulnerable Software and Affected Versions MOLIE WordPress plugin versions prior to 0.5 Description The issue arises from the lack of validation and escaping of a post parameter before its use in a SQL statement, leading to an SQL Injection. Recommendations For MOLIE WordPress plugin...

CVE-2021-25006: Improper Neutralization of Input During Web Page Generation

The MOLIE WordPress plugin through 0.5 does not escape the courseid parameter before outputting it back in the admin dashboard, leading to a Reflected Cross-Site Scripting issue...