Skip to content
Not rated

CVE-2021-24861 The Quotes Collection WordPress plugin through 2.5.2 does not validate and escape the bulkcheck parameter before using…

Description

The Quotes Collection WordPress plugin through 2.5.2 does not validate and escape the bulkcheck parameter before using it in a SQL statement, leading to a SQL injection

Affected products and versions

Product Affected versions Fixed in
Quotes Collection 2.5.2 No fix stated
Track this CVE