CVE-2021-24303CWE-89

JiangQie Official Website Mini Program < 1.1.1 - Authenticated SQL Injection

published September 6, 2021

CVSS
—
EPSS
2%
Percentile
75.7
In the wild
Unconfirmed
What it is

The JiangQie Official Website Mini Program WordPress plugin before 1.1.1 does not escape or validate the id GET parameter before using it in SQL statements, leading to SQL injection issues

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01608 · 75.7th percentile
Weakness
CWE-89 · Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Published
2021-09-06T11:09Z
EPSS history
Timeline
  • 06 SEP 11:09Z
    JiangQie Official Website Mini Program < 1.1.1 - Authenticated SQL Injection
    cvelistv5