Skip to content
NewA calmer, faster ZeroHour
VulnerabilityPoC ×23

CVE-2021-24750

CVSS 3.1
8.8 high
EPSS
38%p99
Published
·
Modified
Analyze CVE-2021-24750 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

The WP Visitor Statistics (Real Time Traffic) WordPress plugin before 4.8 does not properly sanitise and escape the refUrl in the refDetails AJAX action, available to any authenticated user, which could allow users with a role as low as subscriber to perform SQL injection attacks

Vendors
codepress
Products
visitor statistics
Ecosystems
WordPress
Weakness
CWE-89
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD CVE.org GitHub PoCs EPSS (38.3%)

In the news

1 story