CVE-2021-24137 Blog2Social: Social Media Auto Post & Scheduler < 6.3.1 - Authenticated SQL Injection

2021-03-1814:57:49

CWE-89

WPScan

www.cve.org

blog2social

wordpress

sql injection

AI Score

9.1

Confidence

High

EPSS

0.001

Percentile

39.6%

JSON

Unvalidated input in the Blog2Social WordPress plugin, versions before 6.3.1, lead to SQL Injection in the Re-Share Posts feature, allowing authenticated users to inject arbitrary SQL commands.

CNA Affected

[
  {
    "product": "Blog2Social: Social Media Auto Post & Scheduler",
    "vendor": "Unknown",
    "versions": [
      {
        "lessThan": "6.3.1",
        "status": "affected",
        "version": "6.3.1",
        "versionType": "custom"
      }
    ]
  }
]