CVE-2021-24456 Quiz Maker < 6.2.0.9 - Multiple Authenticated Blind SQL Injections

2021-08-0210:32:02

CWE-89

WPScan

www.cve.org

cve-2021-24456

quiz maker

wordpress plugin

sql injection

admin dashboard

EPSS

0.001

Percentile

37.0%

JSON

The Quiz Maker WordPress plugin before 6.2.0.9 did not properly sanitise and escape the order and orderby parameters before using them in SQL statements, leading to SQL injection issues in the admin dashboard

CNA Affected

[
  {
    "product": "Quiz Maker",
    "vendor": "Ays Pro",
    "versions": [
      {
        "lessThan": "6.2.0.9",
        "status": "affected",
        "version": "6.2.0.9",
        "versionType": "custom"
      }
    ]
  }
]

References

wpscan.com/vulnerability/929ad37d-9cdb-4117-8cd3-cf7130a7c9d4

EPSS

0.001

Percentile

37.0%

JSON

Related for CVELIST:CVE-2021-24456