Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2021-24520

Stock in & out <= 1.0.4 - Authenticated SQL Injection

Description

The Stock in & out WordPress plugin through 1.0.4 lacks proper sanitization before passing variables to an SQL request, making it vulnerable to SQL Injection attacks. Users with a role of contributor or higher can exploit this vulnerability.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown Stock in & out

  • 1.0.4 to ≤ 1.0.4affected

References