Non notée
CVE-2021-24451 The Export Users With Meta WordPress plugin before 0.6.5 did not escape the list of roles to export before using them in…
Description
The Export Users With Meta WordPress plugin before 0.6.5 did not escape the list of roles to export before using them in a SQL statement in the export functionality, available to admins, leading to an authenticated SQL Injection.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Export Users With Meta 0.6 | premières → < 0.6.5 | 0.6.5 |