CVE-2021-24131CWE-89
Anti-Spam by CleanTalk < 5.149 - Multiple Authenticated SQL Injections
published March 18, 2021
What it is
Unvalidated input in the Anti-Spam by CleanTalk WordPress plugin, versions before 5.149, lead to multiple authenticated SQL injection vulnerabilities, however, it requires high privilege user (admin+).
The record
Technical detail
- CVSS
- Not scored
- CVSS v4.0
- Not supplied
- EPSS
- 0.01444 · 73.1th percentile
- Weakness
- CWE-89 · Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
- Published
- 2021-03-18T14:57Z
EPSS history
Timeline