Not rated
CVE-2021-24625 The SpiderCatalog WordPress plugin through 1.7.3 does not sanitise or escape the 'parent' and 'ordering' parameters from…
Description
The SpiderCatalog WordPress plugin through 1.7.3 does not sanitise or escape the 'parent' and 'ordering' parameters from the admin dashboard before using them in a SQL statement, leading to a SQL injection when adding a category
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| SpiderCatalog | 1.7.3 | No fix stated |