Non notée
CVE-2021-24848 The mediamaticAjaxRenameCategory AJAX action of the Mediamatic WordPress plugin before 2.8.1, available to any…
Description
The mediamaticAjaxRenameCategory AJAX action of the Mediamatic WordPress plugin before 2.8.1, available to any authenticated user, does not sanitise the categoryID parameter before using it in a SQL statement, leading to an SQL injection
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Mediamatic – Media Library Folders 2.8 | premières → < 2.8.1 | 2.8.1 |