CVE-2021-24303CWE-89

CVE-2021-24303: vulnerability in JiangQie Official Website Mini Program

JiangQie Official Website Mini Program < 1.1.1 - Authenticated SQL Injection

Published · Updated

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.6%
The JiangQie Official Website Mini Program WordPress plugin before 1.1.1 does not escape or validate the id GET parameter before using it in SQL statements, leading to SQL injection issues