Xllentech ≫ English Islamic Calendar

1 vulnerability found

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.

8.8

CVE-2021-24341

Exploit

EPSS 0.53%
Published 14.06.2021 14:15:08
Last modified 21.11.2024 05:52:52

When deleting a date in the Xllentech English Islamic Calendar WordPress plugin before 2.6.8, the year_number and month_number POST parameters are not sanitised, escaped or validated before being used in a SQL statement, leading to SQL injection.