### [CVE-2021-25030](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-25030)
![](https://img.shields.io/static/v1?label=Product&message=Events%20Made%20Easy&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=2.2.36%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-89%20SQL%20Injection&color=brightgreen)

### Description

The Events Made Easy WordPress plugin before 2.2.36 does not sanitise and escape the search_text parameter before using it in a SQL statement via the eme_searchmail AJAX action, available to any authenticated users. As a result, users with a role as low as subscriber can call it and perform SQL injection attacks

### POC

#### Reference
- https://wpscan.com/vulnerability/bc7058b1-ca93-4c45-9ced-7848c7ae4150

#### Github
- https://github.com/20142995/nuclei-templates