Security Advisory

CVE-2021-24390

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2021-09-06 11:09:19

Last updated 2024-08-03 19:28:23

Assigner WPScan

CVSS score not scored

State PUBLISHED

Description

A proid GET parameter of the WordPress支付宝Alipay|财付通Tenpay|贝宝PayPal集成插件 WordPress plugin through 3.7.2 is not sanitised, properly escaped or validated before inserting to a SQL statement not delimited by quotes, leading to SQL injection.

← Browse all CVEs View on cve.org ↗