Lucene search
PRIOn knowledge basePRION:CVE-2021-24553HistoryAug 23, 2021 - 12:15 p.m.
Sql injection
2021-08-2312:15:00
PRIOn knowledge base
www.prio-n.com
6
0.001 Low
EPSS
Percentile
45.2%
The Timeline Calendar WordPress plugin through 1.2 does not sanitise, validate or escape the edit GET parameter before using it in a SQL statement when editing events, leading to an authenticated SQL injection issue. Other SQL Injections are also present in the plugin
| CPE | Name | Operator | Version |
|---|---|---|---|
| timeline_calendar | le | 1.2 |
Related
nvd
nvd
CVE-2021-24553
2021-08-23 12:15:09
cvelist
cvelist
wpexploit
wpexploit
Timeline Calendar <= 1.2 - Authenticated (admin+) SQL Injection
2021-07-24 00:00:00
wpvulndb
wpvulndb
Timeline Calendar <= 1.2 - Authenticated (admin+) SQL Injection
2021-07-24 00:00:00
cve
cve
CVE-2021-24553
2021-08-23 12:15:09
patchstack
patchstack