Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2021-24827

Asgaros Forum < 1.15.13 - Unauthenticated SQL Injection

Description

The Asgaros Forum WordPress plugin before 1.15.13 does not validate and escape user input when subscribing to a topic before using it in a SQL statement, leading to an unauthenticated SQL injection issue

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown Asgaros Forum

  • 1.15.13 to < 1.15.13affected

References