Skip to content
Not rated

CVE-2021-24550 The Broken Link Manager WordPress plugin through 0.6.5 does not sanitise, validate or escape the url GET parameter…

Description

The Broken Link Manager WordPress plugin through 0.6.5 does not sanitise, validate or escape the url GET parameter before using it in a SQL statement when retrieving an URL to edit, leading to an authenticated SQL injection issue

Affected products and versions

Product Affected versions Fixed in
Broken Link Manager 0.6.5 No fix stated
The 2 CVEs of Broken Link Manager →
Track this CVE