← CVE Intelligence

CVE-2021-24786

Download Monitor < 4.4.5 - Admin+ SQL Injection PUBLISHED

Description (CNA)

The Download Monitor WordPress plugin before 4.4.5 does not properly validate and escape the "orderby" GET parameter before using it in a SQL statement when viewing the logs, leading to an SQL Injection issue

Affected (CNA)

Vendor / productVersions
Unknown / Download Monitoraffected 4.4.5 before 4.4.5

CWE

CWE-89

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.