Not rated
CVE-2021-24497 The Giveaway WordPress plugin through 1.2.2 is vulnerable to an SQL Injection issue which allows an administrative…
Description
The Giveaway WordPress plugin through 1.2.2 is vulnerable to an SQL Injection issue which allows an administrative user to execute arbitrary SQL commands via the $post_id on the options.php page.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Giveaway | 1.2.2 | No fix stated |