mirror of
https://github.com/0xMarcio/cve.git
synced 2026-05-30 00:49:28 +02:00
798 B
798 B
CVE-2021-24140
Description
Unvalidated input in the Ajax Load More WordPress plugin, versions before 5.3.2, lead to SQL Injection in POST /wp-admin/admin-ajax.php with param repeater=' or sleep(5)#&type=test.
POC
Reference
- https://wpscan.com/vulnerability/1876312e-3dba-4909-97a5-afbb76fbc056
- https://wpscan.com/vulnerability/1876312e-3dba-4909-97a5-afbb76fbc056
Github
No PoCs found on GitHub currently.