Security Advisory

CVE-2021-24336

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2021-06-07 10:49:49
Last updated 2024-08-03 19:28:23
Assigner WPScan
State PUBLISHED

Description

The FlightLog WordPress plugin through 3.0.2 does not sanitise, validate or escape various POST parameters before using them a SQL statement, leading to SQL injections exploitable by editor and administrator users