CVE-2021-24957

Published: Apr 25, 2022

Modified: Aug 3, 2024

PUBLISHED

Description

The Advanced Page Visit Counter WordPress plugin before 6.1.6 does not escape the artID parameter before using it in a SQL statement in the apvc_reset_count_art AJAX action, available to any authenticated user, leading to a SQL injection

Vendor	Product	Versions
Unknown	Advanced Page Visit Counter – Advanced WordPress Visit Counter	affected `6.1.6 - < 6.1.6`

Weaknesses (CWE)

CWE-89

References

https://wpscan.com/vulnerability/a282606f-6abf-4f75-99c9-dab0bea8cc96

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2021-24957

Description

Affected Products

Weaknesses (CWE)

References