Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2021-24390

Alipay <= 3.7.2 - Authenticated SQL Injection

Description

A proid GET parameter of the WordPress支付宝Alipay|财付通Tenpay|贝宝PayPal集成插件 WordPress plugin through 3.7.2 is not sanitised, properly escaped or validated before inserting to a SQL statement not delimited by quotes, leading to SQL injection.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown WordPress支付宝Alipay|财付通Tenpay|贝宝PayPal集成插件

  • 3.7.2 to ≤ 3.7.2affected

References