Not rated
CVE-2021-24393 A c GET parameter of the Comment Highlighter WordPress plugin through 0.13 is not properly sanitised, escaped or…
Description
A c GET parameter of the Comment Highlighter WordPress plugin through 0.13 is not properly sanitised, escaped or validated before inserting to a SQL statement, leading to SQL injection.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Comment Highlighter | 0.13 | No fix stated |