CVE-2021-24393
Comment Highlighter <= 0.13 - Authenticated SQL Injection
A c GET parameter of the Comment Highlighter WordPress plugin through 0.13 is not properly sanitised, escaped or validated before inserting to a SQL statement, leading to SQL injection.
CVSS 3.1 · 7.2 High
EPSS 1.5%
KEV · Not listed
Vendors
Products