CVE-2021-24336

PoC ×2—

CVSS 3.1

7.2 high

EPSS

2%p74

Published

Jun 7, 2021 (Jun 7, 2021)

Modified

Jun 17, 2026

Description

The FlightLog WordPress plugin through 3.0.2 does not sanitise, validate or escape various POST parameters before using them a SQL statement, leading to SQL injections exploitable by editor and administrator users

Vendors: zavedil
Products: flightlog
Ecosystems: WordPress
Weakness: CWE-89
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.5%)

In the news0 stories

No ingested article mentions this CVE yet.