← CVE Intelligence

CVE-2021-24758

Email Log < 2.4.7 - Admin+ SQL Injection PUBLISHED

Description (CNA)

The Email Log WordPress plugin before 2.4.7 does not properly validate, sanitise and escape the "orderby" and "order" GET parameters before using them in SQL statement in the admin dashboard, leading to SQL injections

Affected (CNA)

Vendor / productVersions
Unknown / Email Logaffected 2.4.7 before 2.4.7

CWE

CWE-89

References

ADP enrichment

CVE

No English description supplied.