CVE-2021-4301

The CVE-2021-4301 entry affects slackero phpwcms (versions up to 1.9.26). The root cause is SQL injection triggered by manipulating the PHP variable phpwcms['db_prepend']. Impact is SQL injection with remote attack potential on affected installations. A fix is available in phpwcms 1.9.27, with th...