The Cookie Notification Plugin for... CVE-2021-24858

6.5 AV AC AU C I A
发布: 2022-01-24
修订: 2024-11-21

The Cookie Notification Plugin for WordPress plugin before 1.0.9 does not sanitise or escape the id GET parameter before using it in a SQL statement, when retrieving the setting to edit in the admin dashboard, leading to an authenticated SQL Injection

0%
暂无可用Exp或PoC
当前有1条受影响产品信息