mirror of
https://github.com/0xMarcio/cve.git
synced 2026-05-13 14:14:44 +02:00
800 B
800 B
CVE-2021-24860
Description
The BSK PDF Manager WordPress plugin before 3.1.2 does not validate and escape the orderby and order parameters before using them in a SQL statement, leading to a SQL injection issue
POC
Reference
- https://wpscan.com/vulnerability/d5891973-37d0-48cb-a5a3-a26c771b3369
- https://wpscan.com/vulnerability/d5891973-37d0-48cb-a5a3-a26c771b3369
Github
No PoCs found on GitHub currently.