CVE-2021-24497

The CVE-2021-24497 entry concerns the WordPress Giveaway plugin, affected up to version 1.2.2. It describes an authenticated SQL Injection vulnerability that allows an administrative user to execute arbitrary SQL via the options.php page parameter post_id. Public sources (WPScan/WPVulnDB) provide...