Unrated severityNVD Advisory· Published Feb 17, 2023· Updated Mar 19, 2025

CVE-2021-32441

Description

SQL Injection vulnerability in Exponent-CMS v.2.6.0 fixed in 2.7.0 allows attackers to gain access to sensitive information via the selectValue function in the expConfig class.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Exponent-CMS/Exponent-CMSdescription
Exponent/Exponent CMSllm-fuzzy
Range: <=2.6.0

Patches

Vulnerability mechanics

References

github.com/exponentcms/exponent-cms/issues/1542mitre
github.com/pang0lin/CVEproject/blob/main/ExponentCMS_v2.6.0_sqli.mdmitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000