Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2021-24397

MicroCopy <= 1.1.0 - Authenticated SQL Injection

Description

The edit functionality in the MicroCopy WordPress plugin through 1.1.0 makes a get request to fetch the related option. The id parameter used is not sanitised, escaped or validated before inserting to a SQL statement, leading to SQL injection.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown MicroCopy

  • 1.1.0 to ≤ 1.1.0affected

References