Unrated severityNVD Advisory· Published Mar 18, 2021· Updated Aug 3, 2024
Blog2Social: Social Media Auto Post & Scheduler < 6.3.1 - Authenticated SQL Injection
CVE-2021-24137
Description
Unvalidated input in the Blog2Social WordPress plugin, versions before 6.3.1, lead to SQL Injection in the Re-Share Posts feature, allowing authenticated users to inject arbitrary SQL commands.
Affected products
1- Range: 6.3.1
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- wpscan.com/vulnerability/9eb94e55-765b-4df5-baea-b247ef72aef3mitrex_refsource_MISC
News mentions
0No linked articles in our index yet.