CVE-2021-24457: Portfolio Responsive Gallery < 1.1.8 - Authenticated Blind SQL Injections
The getportfolios() and getportfolioattributes() functions in the class-portfolio-responsive-gallery-list-table.php and class-portfolio-responsive-gallery-attributes-list-table.php files of the Portfolio Responsive Gallery WordPress plugin before 1.1.8 did not use whitelist or validate the orderby parameter before using it in SQL statements passed to the getresults() DB calls, leading to SQL injection issues in the admin dashboard
Affected Software
Event History
Frequently Asked Questions
What is vulnerability CVE-2021-24457 about?
The vulnerability CVE-2021-24457 is about two functions in the Portfolio Responsive Gallery WordPress plugin that did not use whitelist or validate the orderb parameter, allowing for SQL injection attacks.
Which functions are affected by vulnerability CVE-2021-24457?
The get_portfolios() and get_portfolio_attributes() functions in the class-portfolio-responsive-gallery-list-table.php and class-portfolio-responsive-gallery-attributes-list-table.php files are affected by vulnerability CVE-2021-24457.
What is the severity of vulnerability CVE-2021-24457?
The severity of vulnerability CVE-2021-24457 is high, with a CVSS score of 8.8.
How can I fix vulnerability CVE-2021-24457?
To fix vulnerability CVE-2021-24457, update the Portfolio Responsive Gallery WordPress plugin to version 1.1.8 or above.
What is the CWE ID for vulnerability CVE-2021-24457?
The CWE ID for vulnerability CVE-2021-24457 is CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')).