admin/cve
1
0
Fork 0
mirror of https://github.com/0xMarcio/cve.git synced 2025-11-30 18:56:19 +00:00
Code Issues Packages Projects Releases Wiki Activity
cve/2021/CVE-2021-24143.md
0xMarcio 48a00929ac Removed duplicates
2024-06-18 02:51:15 +02:00

762 B
Raw Blame History

CVE-2021-24143

Description

Unvalidated input in the AccessPress Social Icons plugin, versions before 1.8.1, did not sanitise its widget attribute, allowing accounts with post permission, such as author, to perform SQL injections.

POC

Reference

Github