Lucene search
+L

1 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/03/18 12:00 a.m.•4 views

CVE-2021-24132: Improper Neutralization of Special Elements used in an SQL Command

The Slider by 10Web WordPress plugin, versions before 1.2.36, in the bulkaction, exportfull and savesliderdb functionalities of the plugin were vulnerable, allowing a high privileged user Admin, or medium one such as Contributor+ if "Role Options" is turn on for other users to perform a SQL...

8.8CVSS5.8AI score0.02586EPSS
SaveExploits2References3
Rows per page
Query Builder