CVE-2021-24860: BSK PDF Manager < 3.1.2 - Admin+ SQL Injection
The BSK PDF Manager WordPress plugin before 3.1.2 does not validate and escape the orderby and order parameters before using them in a SQL statement, leading to a SQL injection issue
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-24860?
The severity of CVE-2021-24860 is high.
What is the affected software of CVE-2021-24860?
The affected software of CVE-2021-24860 is the BSK PDF Manager WordPress plugin before version 3.1.2.
What is the vulnerability description of CVE-2021-24860?
CVE-2021-24860 is a SQL injection vulnerability in the BSK PDF Manager WordPress plugin before version 3.1.2 that allows attackers to inject malicious SQL statements into the plugin's SQL queries.
How can I fix CVE-2021-24860?
To fix CVE-2021-24860, update the BSK PDF Manager WordPress plugin to version 3.1.2 or later.
Where can I find more information about CVE-2021-24860?
You can find more information about CVE-2021-24860 at the following reference: [https://wpscan.com/vulnerability/d5891973-37d0-48cb-a5a3-a26c771b3369](https://wpscan.com/vulnerability/d5891973-37d0-48cb-a5a3-a26c771b3369)