CVE-2021-24303
JiangQie Official Website Mini Program < 1.1.1 - Authenticated SQL Injection
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 1.6%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
06 Sep 2021Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
The JiangQie Official Website Mini Program WordPress plugin before 1.1.1 does not escape or validate the id GET parameter before using it in SQL statements, leading to SQL injection issues
Affected products
Unknown · JiangQie Official Website Mini ProgramWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →