Security Advisory

CVE-2021-24748

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2021-11-29 08:25:31
Last updated 2024-08-03 19:42:16
Assigner WPScan
State PUBLISHED

Description

The Email Before Download WordPress plugin before 6.8 does not properly validate and escape the order and orderby GET parameters before using them in SQL statements, leading to authenticated SQL injection issues