CVE-2021-24758
Email Log < 2.4.7 - Admin+ SQL Injection
HIGH 8.8EPSS 1.3%
The Email Log WordPress plugin before 2.4.7 does not properly validate, sanitise and escape the "orderby" and "order" GET parameters before using them in SQL statement in the admin dashboard, leading to SQL injections
- Affected
- Email Log
- CVSS v3.1 NVD
- 8.8 HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS v2.0 NVD
- 6.5 MEDIUM
AV:N/AC:L/Au:S/C:P/I:P/A:P - EPSS
- 1.33% chance of exploitation in the next 30 days, 71st percentile
- Published
- 2021-11-17
- Updated
- 2024-08-03