CVE-2021-24848

CVE-2021-24848 affects the Mediamatic WordPress plugin prior to 2.8.1. The mediamaticAjaxRenameCategory action accepts categoryID from authenticated users and uses it in a SQL statement without sanitisation, enabling SQL injection. Impact is partial confidentiality/integrity/availability (per CVS...

PT-2021-16329

Name of the Vulnerable Software and Affected Versions: Mediamatic WordPress plugin versions prior to 2.8.1 Description: The issue concerns the mediamaticAjaxRenameCategory AJAX action, which is accessible to any authenticated user. It fails to sanitize the categoryID parameter before using it in ...

CVE-2021-24848: Improper Neutralization of Special Elements used in an SQL Command

The mediamaticAjaxRenameCategory AJAX action of the Mediamatic WordPress plugin before 2.8.1, available to any authenticated user, does not sanitise the categoryID parameter before using it in a SQL statement, leading to an SQL injection...