Lucene search
+L

1 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/03/18 12:00 a.m.•8 views

CVE-2021-24149: Improper Neutralization of Special Elements used in an SQL Command

Unvalidated input in the Modern Events Calendar Lite WordPress plugin, versions before 5.16.6, did not sanitise the mecpostid POST parameter in the mecfesform AJAX action when logged in as an author+, leading to an authenticated SQL Injection issue...

8.8CVSS5.8AI score0.01505EPSS
SaveExploits2References3
Rows per page
Query Builder