CVEs-PoC/2021/CVE-2021-24862.md

CVE-2021-24862

Description

The RegistrationMagic WordPress plugin before 5.0.1.6 does not escape user input in its rm_chronos_ajax AJAX action before using it in a SQL statement when duplicating tasks in batches, which could lead to a SQL injection issue

POC

Reference

• http://packetstormsecurity.com/files/165746/WordPress-RegistrationMagic-V-5.0.1.5-SQL-Injection.html
• http://packetstormsecurity.com/files/165746/WordPress-RegistrationMagic-V-5.0.1.5-SQL-Injection.html
• https://wpscan.com/vulnerability/7d3af3b5-5548-419d-aa32-1f7b51622615
• https://wpscan.com/vulnerability/7d3af3b5-5548-419d-aa32-1f7b51622615

Github

• https://github.com/ARPSyndicate/cvemon
• https://github.com/Enes4xd/Enes4xd
• https://github.com/Hacker5preme/Exploits
• https://github.com/cr0ss2018/cr0ss2018
• https://github.com/ezelnur6327/Enes4xd
• https://github.com/ezelnur6327/ezelnur6327