2 matches found
Sql injection
The getportfolios and getportfolioattributes functions in the class-portfolio-responsive-gallery-list-table.php and class-portfolio-responsive-gallery-attributes-list-table.php files of the Portfolio Responsive Gallery WordPress plugin before 1.1.8 did not use whitelist or validate the orderby...
6.5CVSS9AI score0.014EPSS
SaveExploits2References1Affected Software1
CVE-2021-24457: Improper Neutralization of Special Elements used in an SQL Command
The getportfolios and getportfolioattributes functions in the class-portfolio-responsive-gallery-list-table.php and class-portfolio-responsive-gallery-attributes-list-table.php files of the Portfolio Responsive Gallery WordPress plugin before 1.1.8 did not use whitelist or validate the orderby...
8.8CVSS5.8AI score0.014EPSS
SaveExploits2References2
20