CVEs-PoC/2021/CVE-2021-24141.md

### [CVE-2021-24141](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-24141)
![](https://img.shields.io/static/v1?label=Product&message=Advanced%20Database%20Cleaner&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=3.0.2%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-89%20SQL%20Injection&color=brightgreen)

### Description

Unvaludated input in the Advanced Database Cleaner plugin, versions before 3.0.2, lead to SQL injection allowing high privilege users (admin+) to perform SQL attacks.

### POC

#### Reference
- https://wpscan.com/vulnerability/5c8adca0-fe19-4624-81ef-465b8d007f93

#### Github
- https://github.com/20142995/nuclei-templates