← CVE Intelligence

CVE-2021-24858

WP Cookie User Info < 1.0.9 - Admin+ SQL Injection PUBLISHED

Description (CNA)

The Cookie Notification Plugin for WordPress plugin before 1.0.9 does not sanitise or escape the id GET parameter before using it in a SQL statement, when retrieving the setting to edit in the admin dashboard, leading to an authenticated SQL Injection

Affected (CNA)

Vendor / productVersions
Unknown / Cookie Notification Plugin for WordPress – WP Cookie User Infoaffected 1.0.9 before 1.0.9

CWE

CWE-89

References

ADP enrichment

CVE

No English description supplied.