← CVE Intelligence

CVE-2021-24360

Yes/No Chart < 1.0.12 - Authenticated (contributor+) Blind SQL Injection PUBLISHED

Description (CNA)

The Yes/No Chart WordPress plugin before 1.0.12 did not sanitise its sid shortcode parameter before using it in a SQL statement, allowing medium privilege users (contributor+) to perform Blind SQL Injection attacks

Affected (CNA)

Vendor / productVersions
Unknown / Yes/No Chartaffected 1.0.12 before 1.0.12

CWE

CWE-89

References

ADP enrichment

CVE

No English description supplied.