1 matches found
CVE-2021-24951: Improper Neutralization of Special Elements used in an SQL Command
The LearnPress WordPress plugin before 4.1.4 does not sanitise, validate and escape the id parameter before using it in SQL statements when duplicating course/lesson/quiz/question, leading to SQL Injections issues...
9.8CVSS5.9AI score0.01575EPSS
SaveExploits2References2
20