CVE-2021-25045CWE-89

Asgaros Forum < 1.15.15 - Admin+ SQL Injection via forum_id

published January 24, 2022

CVSS
—
EPSS
2%
Percentile
74.1
In the wild
Unconfirmed
What it is

The Asgaros Forum WordPress plugin before 1.15.15 does not validate or escape the forum_id parameter before using it in a SQL statement when editing a forum, leading to an SQL injection issue

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01502 · 74.1th percentile
Weakness
CWE-89 · Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Published
2022-01-24T08:01Z
EPSS history
Timeline
  • 24 JAN 08:01Z
    Asgaros Forum < 1.15.15 - Admin+ SQL Injection via forum_id
    cvelistv5