CVE-2021-24551

CVE-2021-24551: Edit Comments <= 0.3 - Unauthenticated SQL Injection

Vendor Unknown
Product Edit Comments
Weakness CWE-89 · SQLi
Published August 23, 2021
Last update August 3, 2024
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The Edit Comments WordPress plugin through 0.3 does not sanitise, validate or escape the jal_edit_comments GET parameter before using it in a SQL statement, leading to a SQL injection issue

Key dates

02Disclosure timeline

August 23, 2021 CVE published
August 3, 2024 Record updated