Non notée
CVE-2021-24361 In the Location Manager WordPress plugin before 2.1.0.10, the AJAX action gd_popular_location_list did not properly…
Description
In the Location Manager WordPress plugin before 2.1.0.10, the AJAX action gd_popular_location_list did not properly sanitise or validate some of its POST parameters, which are then used in a SQL statement, leading to unauthenticated SQL Injection issues.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Location Manager 2.1 | premières → < 2.1.0.10 | 2.1.0.10 |