Not rated
CVE-2021-24336 The FlightLog WordPress plugin through 3.0.2 does not sanitise, validate or escape various POST parameters before…
Description
The FlightLog WordPress plugin through 3.0.2 does not sanitise, validate or escape various POST parameters before using them a SQL statement, leading to SQL injections exploitable by editor and administrator users
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| FlightLog | 3.0.2 | No fix stated |