← CVE Intelligence

CVE-2021-24951

LearnPress < 4.1.4 - Admin+ SQL Injection PUBLISHED

Description (CNA)

The LearnPress WordPress plugin before 4.1.4 does not sanitise, validate and escape the id parameter before using it in SQL statements when duplicating course/lesson/quiz/question, leading to SQL Injections issues

Affected (CNA)

Vendor / productVersions
Unknown / LearnPress – WordPress LMS Pluginaffected 4.1.4 before 4.1.4

CWE

CWE-89

References

ADP enrichment

CVE

No English description supplied.