Skip to content
OpenAdvisories
Unscored CVE-2021-24137 EUVD-2021-11051GHSA-fxmq-6v3w-26hj

Blog2Social: Social Media Auto Post & Scheduler < 6.3.1 - Authenticated SQL Injection

Published Mar 18, 2021 · Updated Aug 3, 2024 · Assigned by WPScan

Description

Unvalidated input in the Blog2Social WordPress plugin, versions before 6.3.1, lead to SQL Injection in the Re-Share Posts feature, allowing authenticated users to inject arbitrary SQL commands.

Affected products

VendorProductAffectedFixed
— Blog2Social: Social Media Auto Post & Scheduler 6.3.1 – < 6.3.1 6.3.1

References