Not rated
CVE-2021-24769 The Permalink Manager Lite WordPress plugin before 2.2.13.1 does not validate and escape the orderby parameter before…
Description
The Permalink Manager Lite WordPress plugin before 2.2.13.1 does not validate and escape the orderby parameter before using it in a SQL statement in the Permalink Manager page, leading to a SQL Injection
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Permalink Manager Lite 2.2 | earliest → < 2.2.13.1 | 2.2.13.1 |