Lucene search
WPScanCVELIST:CVE-2021-24463HistoryAug 02, 2021 - 10:32 a.m.
CVE-2021-24463 Image Slider by Ays - Responsive Slider and Carousel < 2.5.0 - Authenticated Blind SQL Injection
2021-08-0210:32:09
CWE-89
WPScan
www.cve.org
2
image slider
ays
responsive slider
carousel
sql injection
wordpress
plugin
security issue
authenticated
EPSS
0.001
Percentile
36.7%
The get_sliders() function in the Image Slider by Ays- Responsive Slider and Carousel WordPress plugin before 2.5.0 did not use whitelist or validate the orderby parameter before using it in SQL statements passed to the get_results() DB calls, leading to SQL injection issues in the admin dashboard
CNA Affected
[
{
"product": "Image Slider by Ays- Responsive Slider and Carousel",
"vendor": "Ays Pro",
"versions": [
{
"lessThan": "2.5.0",
"status": "affected",
"version": "2.5.0",
"versionType": "custom"
}
]
}
]Related
wpvulndb
wpvulndb
wpexploit
wpexploit
cve
cve
CVE-2021-24463
2021-08-02 11:15:09
prion
prion
Sql injection
2021-08-02 11:15:00
patchstack
patchstack
nvd
nvd
CVE-2021-24463
2021-08-02 11:15:09