Skip to content
OpenAdvisories
Unscored CVE-2021-24580 EUVD-2021-11492GHSA-2mxj-pg8q-6c2c

Side Menu Lite < 2.2.6 - Authenticated SQL Injection

Published Aug 30, 2021 · Updated Aug 3, 2024 · Assigned by WPScan

Description

The Side Menu Lite WordPress plugin before 2.2.6 does not sanitise user input from the List page in the admin dashboard before using it in SQL statement, leading to a SQL Injection issue

Affected products

VendorProductAffectedFixed
— Side Menu Lite - add sticky fixed buttons 2.2.6 – < 2.2.6 2.2.6

References