Security Advisory

CVE-2021-24131

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2021-03-18 14:57:48
Last updated 2024-08-03 19:21:18
Assigner WPScan
State PUBLISHED

Description

Unvalidated input in the Anti-Spam by CleanTalk WordPress plugin, versions before 5.149, lead to multiple authenticated SQL injection vulnerabilities, however, it requires high privilege user (admin+).