Not rated
CVE-2021-24629 The Post Content XMLRPC WordPress plugin through 1.0 does not sanitise or escape multiple GET/POST parameters before…
Description
The Post Content XMLRPC WordPress plugin through 1.0 does not sanitise or escape multiple GET/POST parameters before using them in SQL statements in the admin dashboard, leading to an authenticated SQL Injections
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Post Content XMLRPC | 1.0 | No fix stated |