Lucene search

K
prionPRIOn knowledge basePRION:CVE-2021-24747
HistoryDec 13, 2021 - 11:15 a.m.

Sql injection

2021-12-1311:15:00
PRIOn knowledge base
www.prio-n.com
2

7.3 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

38.5%

The SEO Booster WordPress plugin before 3.8 allows for authenticated SQL injection via the “fn_my_ajaxified_dataloader_ajax” AJAX request as the $_REQUEST[‘order’][0][‘dir’] parameter is not properly escaped leading to blind and error-based SQL injections.

CPENameOperatorVersion
seo_boosterlt3.8

7.3 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

38.5%