Aller au contenu
Se connecter
Non notée

CVE-2021-24461 The get_faqs() function in the FAQ Builder AYS WordPress plugin before 1.3.6 did not use whitelist or validate the…

Description

The get_faqs() function in the FAQ Builder AYS WordPress plugin before 1.3.6 did not use whitelist or validate the orderby parameter before using it in SQL statements passed to the get_results() DB calls, leading to SQL injection issues in the admin dashboard

Produits et versions touchés

Produit Versions touchées Corrigé en
FAQ Builder AYS 1.3 premières → < 1.3.6 1.3.6

Autres CVE de FAQ Builder AYS

Les 3 CVE de FAQ Builder AYS →
CVE-2026-25346 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ays Pro FAQ… 7.1 Élevée CVE-2025-24722 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ays Pro FAQ… 5.9 Moyenne
Suivre cette CVE