← CVE Intelligence

CVE-2021-24497

Giveaway <= 1.2.2 - Authenticated SQL Injection PUBLISHED

Description (CNA)

The Giveaway WordPress plugin through 1.2.2 is vulnerable to an SQL Injection issue which allows an administrative user to execute arbitrary SQL commands via the $post_id on the options.php page.

Affected (CNA)

Vendor / productVersions
Unknown / Giveawayaffected 1.2.2 through 1.2.2

CWE

CWE-89

References

ADP enrichment

CVE

No English description supplied.