CVE-2021-24456CWE-89
Quiz Maker < 6.2.0.9 - Multiple Authenticated Blind SQL Injections
published August 2, 2021
What it is
The Quiz Maker WordPress plugin before 6.2.0.9 did not properly sanitise and escape the order and orderby parameters before using them in SQL statements, leading to SQL injection issues in the admin dashboard
The record
Technical detail
- CVSS
- Not scored
- CVSS v4.0
- Not supplied
- EPSS
- 0.01292 · 70.1th percentile
- Weakness
- CWE-89 · Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
- Published
- 2021-08-02T10:32Z
EPSS history
Timeline