CVE-2021-24860

CVE-2021-24860: BSK PDF Manager < 3.1.2 - Admin+ SQL Injection

Vendor Unknown
Product BSK PDF Manager
Weakness CWE-89 · SQLi
Published November 29, 2021
Last update August 3, 2024
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The BSK PDF Manager WordPress plugin before 3.1.2 does not validate and escape the orderby and order parameters before using them in a SQL statement, leading to a SQL injection issue

Key dates

02Disclosure timeline

November 29, 2021 CVE published
August 3, 2024 Record updated