← CVE Intelligence

CVE-2021-24125

Contact Form Submissions < 1.7.1 - Authenticated SQL Injection PUBLISHED

Description (CNA)

Unvalidated input in the Contact Form Submissions WordPress plugin before 1.7.1, could lead to SQL injection in the wpcf7_contact_form GET parameter when submitting a filter request as a high privilege user (admin+)

Affected (CNA)

Vendor / productVersions
Unknown / Contact Form Submissionsaffected 1.7.1 before 1.7.1

CWE

CWE-89

References

ADP enrichment

CVE

No English description supplied.