CVE-2021-24456

CVE-2021-24456: Quiz Maker < 6.2.0.9 - Multiple Authenticated Blind SQL Injections

Vendor Ays Pro

Product Quiz Maker

Weakness CWE-89 · SQLi

Published August 2, 2021

Last update August 3, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The Quiz Maker WordPress plugin before 6.2.0.9 did not properly sanitise and escape the order and orderby parameters before using them in SQL statements, leading to SQL injection issues in the admin dashboard

Key dates

02Disclosure timeline

August 2, 2021 CVE published

August 3, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2021-24456 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/89.html