Not rated
CVE-2021-24860 The BSK PDF Manager WordPress plugin before 3.1.2 does not validate and escape the orderby and order parameters before…
Description
The BSK PDF Manager WordPress plugin before 3.1.2 does not validate and escape the orderby and order parameters before using them in a SQL statement, leading to a SQL injection issue
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| BSK PDF Manager 3.1 | earliest → < 3.1.2 | 3.1.2 |