CVE-2021-27581

The CVE-2021-27581 entry concerns Kentico CMS 5.5 R2 (build 5.5.3996) Blog module, where a SQL injection is possible via the tagname parameter. The root cause is a vulnerable SQL construction in the Blog module that allows an attacker to interact with the back-end database, including data access/...