Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 1

Export CSV
CVE-2021-24360

Yes/No Chart < 1.0.12 - Authenticated (contributor+) Blind SQL Injection

The Yes/No Chart WordPress plugin before 1.0.12 did not sanitise its sid shortcode parameter before using it in a SQL statement, allowing medium privilege users (contributor+) to perform Blind SQL Injection attacks

CVSS 3.1 · 6.5 Medium EPSS 1.2% KEV · Not listed
Vendors
Kohsei-works
Products
Yes\/no Chart