Lucene search
PRIOn knowledge basePRION:CVE-2021-24666HistorySep 27, 2021 - 4:15 p.m.
Default credentials
2021-09-2716:15:00
PRIOn knowledge base
www.prio-n.com
The Podlove Podcast Publisher WordPress plugin before 3.5.6 contains a ‘Social & Donations’ module (not activated by default), which adds the rest route '/services/contributor/(?P<id>[\d]+), takes an ‘id’ and ‘category’ parameters as arguments. Both parameters can be used for the SQLi.
| CPE | Name | Operator | Version |
|---|---|---|---|
| podlove_podcast_publisher | lt | 3.5.6 |
Related
nvd
nvd
CVE-2021-24666
2021-09-27 16:15:09
patchstack
patchstack
cvelist
cvelist
nuclei
nuclei
WordPress Podlove Podcast Publisher <3.5.6 - SQL Injection
2023-03-31 11:28:24
wpexploit
wpexploit
Podlove Podcast Publisher < 3.5.6 - Unauthenticated SQL Injection
2021-08-24 00:00:00
osv
osv
CVE-2021-24666
2021-09-27 16:15:09
wpvulndb
wpvulndb
Podlove Podcast Publisher < 3.5.6 - Unauthenticated SQL Injection
2021-08-24 00:00:00
cve
cve
CVE-2021-24666
2021-09-27 16:15:09