Lucene search
+L

1 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/12/13 12:00 a.m.•2 views

CVE-2021-24747: Improper Neutralization of Special Elements used in an SQL Command

The SEO Booster WordPress plugin before 3.8 allows for authenticated SQL injection via the "fnmyajaxifieddataloaderajax" AJAX request as the $REQUEST'order'0'dir' parameter is not properly escaped leading to blind and error-based SQL injections...

7.2CVSS5.8AI score0.01497EPSS
SaveExploits2References2
Rows per page
Query Builder