The Side Menu Lite WordPress plugin before 2.2.6 does not sanitise user input from the List page in the admin dashboard before using it in SQL statement, leading to a SQL Injection issue
References
Link | Resource |
---|---|
https://wpscan.com/vulnerability/2faccd1b-4b1c-4b3e-b917-de2d05e860f8 | Exploit Third Party Advisory |
Configurations
Information
Published : 2021-08-30 08:15
Updated : 2021-09-02 06:55
NVD link : CVE-2021-24580
Mitre link : CVE-2021-24580
JSON object : View
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Products Affected
wow-estore
- side_menu