CVE-2024-9886: Improper Neutralization of Input During Web Page Generation

The WP Baidu Map plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'baidumap' shortcode in all versions up to, and including, 1.2.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

CVE-2021-44302

BaiCloud-cms v2.5.7 was discovered to contain multiple SQL injection vulnerabilities via the tongji and baidumap parameters in /user/ztconfig.php...

Sql injection

BaiCloud-cms v2.5.7 was discovered to contain multiple SQL injection vulnerabilities via the tongji and baidumap parameters in /user/ztconfig.php...

CVE-2021-44302

CVE-2021-44302 affects BaiCloud-cms v2.5.7 and is due to multiple SQL injection vulnerabilities exposed through the tongji and baidu_map parameters in /user/ztconfig.php. The NVD records CVSS 3.1 base score 8.8 (HIGH) with network access, low attack complexity, and privileges required at LOW, ind...

CVE-2021-44302

BaiCloud-cms v2.5.7 was discovered to contain multiple SQL injection vulnerabilities via the tongji and baidumap parameters in /user/ztconfig.php...

CVE-2021-44302: Improper Neutralization of Special Elements used in an SQL Command

BaiCloud-cms v2.5.7 was discovered to contain multiple SQL injection vulnerabilities via the tongji and baidumap parameters in /user/ztconfig.php...