Skip to content
Not rated

CVE-2021-24394 An id GET parameter of the Easy Testimonial Manager WordPress plugin through 1.2.0 is not sanitised, escaped or…

Description

An id GET parameter of the Easy Testimonial Manager WordPress plugin through 1.2.0 is not sanitised, escaped or validated before inserting to a SQL statement, leading to SQL injection

Affected products and versions

Product Affected versions Fixed in
Easy Testimonial Manager 1.2.0 No fix stated
Track this CVE