3 matches found
CVE-2021-24391
An editid GET parameter of the Cashtomer WordPress plugin through 1.0.0 is not properly sanitised, escaped or validated before inserting to a SQL statement, leading to SQL injection...
8.8CVSS7.2AI score0.01568EPSS
SaveExploits2References1
CVE-2021-24391
An editid GET parameter of the Cashtomer WordPress plugin through 1.0.0 is not properly sanitised, escaped or validated before inserting to a SQL statement, leading to SQL injection...
8.8CVSS0.01568EPSS
SaveExploits2References2
CVE-2021-24391 Cashtomer <= 1.0.0 - Authenticated SQL Injection
An editid GET parameter of the Cashtomer WordPress plugin through 1.0.0 is not properly sanitised, escaped or validated before inserting to a SQL statement, leading to SQL injection...
9.2AI score0.01568EPSS
SaveExploits2References2
20