Back to search
CVE-2021-24285
Published: May 14, 2021
Modified: Aug 3, 2024
PUBLISHED
Description
The request_list_request AJAX call of the Car Seller - Auto Classifieds Script WordPress plugin through 2.1.0, available to both authenticated and unauthenticated users, does not sanitise, validate or escape the order_id POST parameter before using it in a SQL statement, leading to a SQL Injection issue.
| Vendor | Product | Versions |
|---|---|---|
Unknown | Car Seller - Auto Classifieds Script | affected 2.1.0 - <= 2.1.0 |
Weaknesses (CWE)
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now