cve/2021/CVE-2021-25023.md
2024-06-18 02:51:15 +02:00

832 B

CVE-2021-25023

Description

The Speed Booster Pack PageSpeed Optimization Suite WordPress plugin before 4.3.3.1 does not escape the sbp_convert_table_name parameter before using it in a SQL statement to convert the related table, leading to an SQL injection

POC

Reference

Github

No PoCs found on GitHub currently.