High severity7.5NVD Advisory· Published Feb 17, 2023· Updated Jun 17, 2026
CVE-2021-32441
CVE-2021-32441
Description
SQL Injection vulnerability in Exponent-CMS v.2.6.0 fixed in 2.7.0 allows attackers to gain access to sensitive information via the selectValue function in the expConfig class.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:exponentcms:exponent_cms:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:exponentcms:exponent_cms:*:*:*:*:*:*:*:*range: >=2.6.0,<2.7.0
- (no CPE)range: <2.7.0
- Exponent-CMS/Exponent-CMSdescription
Patches
Vulnerability mechanics
References
2- github.com/exponentcms/exponent-cms/issues/1542nvdIssue TrackingPatch
- github.com/pang0lin/CVEproject/blob/main/ExponentCMS_v2.6.0_sqli.mdnvdThird Party Advisory
News mentions
0No linked articles in our index yet.