Description
An SQL Injection vlnerability exits in Yeswiki doryphore 20211012 via the email parameter in the registration form.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | yeswiki/yeswiki | < 4.1.0 | 4.1.0 | GHSA-xgx2-332h-9x6q |
High · 7.5
CVE-2021-43091
EUVD-2022-1582GHSA-xgx2-332h-9x6q
SQL Injection in Yeswiki
Published Mar 25, 2022 · Updated Aug 4, 2024 · Assigned by mitre