CVE-2021-24863
Assigner: WPScan
Published: 2021-12-13T10:41:14
State: PUBLISHED
affected: product: WP Block and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection Plugin StopBadBots
vendor: Unknown
versions: lessThan: 6.67
status: affected
version: 6.67
versionType: custom
credits: value: JrXnm
descriptions: value: The WP Block and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection Plugin StopBadBots WordPress plugin before 6.67 does not sanitise and escape the User Agent before using it in a SQL statement to save it, leading to a SQL injection
problemTypes: descriptions: cweId: CWE-89
description: CWE-89 SQL Injection
type: CWE
source: discovery: EXTERNAL
title: StopBadBots < 6.67 - Unauthenticated SQL Injection
x_generator: WPScan CVE Generator