admin/cve
1
0
Fork 0
mirror of https://github.com/0xMarcio/cve.git synced 2025-11-30 18:56:19 +00:00
Code Issues Packages Projects Releases Wiki Activity
cve/2021/CVE-2021-24132.md
0xMarcio 48a00929ac Removed duplicates
2024-06-18 02:51:15 +02:00

865 B
Raw Blame History

CVE-2021-24132

Description

The Slider by 10Web WordPress plugin, versions before 1.2.36, in the bulk_action, export_full and save_slider_db functionalities of the plugin were vulnerable, allowing a high privileged user (Admin), or medium one such as Contributor+ (if "Role Options" is turn on for other users) to perform a SQL Injection attacks.

POC

Reference

Github

No PoCs found on GitHub currently.