CVE-2021-24137
Assigner: WPScan
Published: 2021-03-18T14:57:49
State: PUBLISHED
affected: product: Blog2Social: Social Media Auto Post & Scheduler
vendor: Unknown
versions: lessThan: 6.3.1
status: affected
version: 6.3.1
versionType: custom
credits: value: Nguyen Anh Tien - SunCSR (Sun* Cyber Security Research)
descriptions: value: Unvalidated input in the Blog2Social WordPress plugin, versions before 6.3.1, lead to SQL Injection in the Re-Share Posts feature, allowing authenticated users to inject arbitrary SQL commands.
problemTypes: descriptions: cweId: CWE-89
description: CWE-89 SQL Injection
type: CWE
source: discovery: UNKNOWN
title: Blog2Social: Social Media Auto Post & Scheduler < 6.3.1 - Authenticated SQL Injection
x_generator: engine: Vulnogram 0.0.9