Skip to content
OpenAdvisories
Unscored CVE-2021-25007 EUVD-2021-11919GHSA-7977-2v22-fwr7

MOLIE <= 0.5 - Authenticated SQL Injection

Published Mar 14, 2022 · Updated Aug 3, 2024 · Assigned by WPScan

Description

The MOLIE WordPress plugin through 0.5 does not validate and escape a post parameter before using in a SQL statement, leading to an SQL Injection

Affected products

VendorProductAffectedFixed
— MOLIE – Instructure Canvas Linking tool 0.5 – ≤ 0.5 —

References