Non notée
CVE-2021-24829 The Visitor Traffic Real Time Statistics WordPress plugin before 3.9 does not validate and escape user input passed to…
Description
The Visitor Traffic Real Time Statistics WordPress plugin before 3.9 does not validate and escape user input passed to the today_traffic_index AJAX action (available to any authenticated users) before using it in a SQL statement, leading to an SQL injection issue
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Visitor Traffic Real Time Statistics 3.9 | premières → < 3.9 | 3.9 |