Non notée
CVE-2021-24754 The MainWP Child Reports WordPress plugin before 2.0.8 does not validate or sanitise the order parameter before using it…
Description
The MainWP Child Reports WordPress plugin before 2.0.8 does not validate or sanitise the order parameter before using it in a SQL statement in the admin dashboard, leading to an SQL injection issue
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| MainWP Child Reports 2.0 | premières → < 2.0.8 | 2.0.8 |