Beveiligingsadvies

CVE-2021-24750

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2021-12-21 08:45:29

Laatst bijgewerkt 2024-08-03 19:42:16

Toegewezen door WPScan

CVSS-score geen score

Status PUBLISHED

Beschrijving

The WP Visitor Statistics (Real Time Traffic) WordPress plugin before 4.8 does not properly sanitise and escape the refUrl in the refDetails AJAX action, available to any authenticated user, which could allow users with a role as low as subscriber to perform SQL injection attacks

← Alle CVE's bekijken Bekijk op cve.org ↗