CVE-2021-24862CWE-89

RegistrationMagic < 5.0.1.6 - Admin+ SQL Injection

published January 10, 2022

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 99.5th percentile for exploit probability.

CVSS
—
EPSS
73%
Percentile
99.5
In the wild
Unconfirmed
What it is

The RegistrationMagic WordPress plugin before 5.0.1.6 does not escape user input in its rm_chronos_ajax AJAX action before using it in a SQL statement when duplicating tasks in batches, which could lead to a SQL injection issue

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.73293 · 99.5th percentile
Weakness
CWE-89 · Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Published
2022-01-10T15:30Z
EPSS history
Timeline
  • 10 JAN 15:30Z
    RegistrationMagic < 5.0.1.6 - Admin+ SQL Injection
    cvelistv5