CVE-2021-24497 | BDVDB-2026-159291 Detail

Giveaway

Description#

The Giveaway WordPress plugin through 1.2.2 is vulnerable to an SQL Injection issue which allows an administrative user to execute arbitrary SQL commands via the $post_id on the options.php page.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

References#

https://wpscan.com/vulnerability/a1cf08fe-943a-4f14-beb0-25216011b538

Exploit#

No public exploit known

History#

Version 12021-08-23Record published in the CVE List.
Version 22024-08-03Most recent update recorded in the CVE List.