Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2021-24550

Broken Link Manager <= 0.6.5 - Authenticated (admin+) SQL Injection

Description

The Broken Link Manager WordPress plugin through 0.6.5 does not sanitise, validate or escape the url GET parameter before using it in a SQL statement when retrieving an URL to edit, leading to an authenticated SQL injection issue

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown Broken Link Manager

  • 0.6.5 to ≤ 0.6.5affected

References