CVE-2021-24138
AdRotate < 5.8.4 - Authenticated SQL Injection
MEDIUM 5.5EPSS 1.2%
Unvalidated input in the AdRotate WordPress plugin, versions before 5.8.4, leads to Authenticated SQL injection via param "id". This requires an admin privileged user.
- Affected
- AdRotate
- CVSS v3.1 NVD
- 5.5 MEDIUM
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:L - CVSS v2.0 NVD
- 5.5 MEDIUM
AV:N/AC:L/Au:S/C:P/I:N/A:P - EPSS
- 1.23% chance of exploitation in the next 30 days, 69th percentile
- Published
- 2021-03-18
- Updated
- 2024-08-03