Not rated
CVE-2021-24394 An id GET parameter of the Easy Testimonial Manager WordPress plugin through 1.2.0 is not sanitised, escaped or…
Description
An id GET parameter of the Easy Testimonial Manager WordPress plugin through 1.2.0 is not sanitised, escaped or validated before inserting to a SQL statement, leading to SQL injection
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Easy Testimonial Manager | 1.2.0 | No fix stated |