mirror of
https://github.com/0xMarcio/cve.git
synced 2026-05-15 03:30:24 +02:00
856 B
856 B
CVE-2021-24451
Description
The Export Users With Meta WordPress plugin before 0.6.5 did not escape the list of roles to export before using them in a SQL statement in the export functionality, available to admins, leading to an authenticated SQL Injection.
POC
Reference
- https://wpscan.com/vulnerability/40603382-404b-44a2-8212-f2008366891c
- https://wpscan.com/vulnerability/40603382-404b-44a2-8212-f2008366891c
Github
No PoCs found on GitHub currently.