CVE-2021-24143

CVE-2021-24143: AccessPress Social Icons < 1.8.1 - Authenticated SQL Injection

Vendor Unknown
Product AccessPress Social Icons
Weakness CWE-89 · SQLi
Published March 18, 2021
Last update August 3, 2024
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Unvalidated input in the AccessPress Social Icons plugin, versions before 1.8.1, did not sanitise its widget attribute, allowing accounts with post permission, such as author, to perform SQL injections.

Key dates

02Disclosure timeline

March 18, 2021 CVE published
August 3, 2024 Record updated