Non notée
CVE-2021-24625 The SpiderCatalog WordPress plugin through 1.7.3 does not sanitise or escape the 'parent' and 'ordering' parameters from…
Description
The SpiderCatalog WordPress plugin through 1.7.3 does not sanitise or escape the 'parent' and 'ordering' parameters from the admin dashboard before using them in a SQL statement, leading to a SQL injection when adding a category
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| SpiderCatalog | 1.7.3 | Pas de correctif indiqué |