CVE-2021-24336

CVE-2021-24336: FlightLog <= 3.0.2 - Authenticated (editor+) SQL Injection

Vendor Unknown
Product FlightLog
Weakness CWE-89 · SQLi
Published June 7, 2021
Last update August 3, 2024

CVSS base score

What the vulnerability does

01Description

The FlightLog WordPress plugin through 3.0.2 does not sanitise, validate or escape various POST parameters before using them a SQL statement, leading to SQL injections exploitable by editor and administrator users

Key dates

02Disclosure timeline

June 7, 2021 CVE published
August 3, 2024 Record updated