EUVD-2021-11305

Malware in sbrugna...

CVE-2021-24393

A c GET parameter of the Comment Highlighter WordPress plugin through 0.13 is not properly sanitised, escaped or validated before inserting to a SQL statement, leading to SQL injection...

CVE-2021-24393

A c GET parameter of the Comment Highlighter WordPress plugin through 0.13 is not properly sanitised, escaped or validated before inserting to a SQL statement, leading to SQL injection...

CVE-2021-24393

A c GET parameter of the Comment Highlighter WordPress plugin through 0.13 is not properly sanitised, escaped or validated before inserting to a SQL statement, leading to SQL injection...

CVE-2021-24393

A c GET parameter of the Comment Highlighter WordPress plugin through 0.13 is not properly sanitised, escaped or validated before inserting to a SQL statement, leading to SQL injection...

CVE-2021-24393

The CVE-2021-24393 entry concerns the WordPress plugin Comment Highlighter (versions up to 0.13). The vulnerability is a SQL injection caused by unsanitized/unchecked c GET parameters that are inserted into an SQL statement. The provided connected documents corroborate this exact flaw across mult...

PT-2021-15926

Name of the Vulnerable Software and Affected Versions Comment Highlighter WordPress plugin versions 0.13 and earlier Description The issue arises from a c GET parameter in the Comment Highlighter WordPress plugin that is not properly sanitized, escaped, or validated before being inserted into a S...

CVE-2021-24393: Improper Neutralization of Special Elements used in an SQL Command

A c GET parameter of the Comment Highlighter WordPress plugin through 0.13 is not properly sanitised, escaped or validated before inserting to a SQL statement, leading to SQL injection...

WordPress 插件 SQL注入漏洞

WordPress plugin is an open source application plugin for WordPress. A SQL injection vulnerability exists in WordPress plugin Comment Highlighter 0.13 and earlier versions, which stems from a SQL injection caused by c GET parameters not being properly cleaned up, escaped, or validated prior to...

Comment Highlighter <= 0.13 - Authenticated SQL Injection

A c GET parameter of the plugin is not properly sanitised, escaped or validated before inserting to a SQL statement, leading to SQL injection. GET...