Non notée
CVE-2021-24769 The Permalink Manager Lite WordPress plugin before 2.2.13.1 does not validate and escape the orderby parameter before…
Description
The Permalink Manager Lite WordPress plugin before 2.2.13.1 does not validate and escape the orderby parameter before using it in a SQL statement in the Permalink Manager page, leading to a SQL Injection
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Permalink Manager Lite 2.2 | premières → < 2.2.13.1 | 2.2.13.1 |