1 matches found
CVE-2021-24149: Improper Neutralization of Special Elements used in an SQL Command
Unvalidated input in the Modern Events Calendar Lite WordPress plugin, versions before 5.16.6, did not sanitise the mecpostid POST parameter in the mecfesform AJAX action when logged in as an author+, leading to an authenticated SQL Injection issue...
8.8CVSS5.8AI score0.01505EPSS
SaveExploits2References3
20