Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2021-24844

Affiliate Manager < 2.8.7 - Admin+ SQL injection

Description

The Affiliates Manager WordPress plugin before 2.8.7 does not validate the orderby parameter before using it in an SQL statement in the admin dashboard, leading to an SQL Injection issue

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown Affiliates Manager

  • 2.8.7 to < 2.8.7affected

References