CVE-2021-24341

CVE-2021-24341 affects the WordPress Xllentech English Islamic Calendar plugin (before 2.6.8). The issue stems from unsanitised year_number and month_number POST parameters used directly in a SQL statement during the delete date operation, enabling SQL injection. Exploitation details are not prov...