CVE-2021-24915: Contest Gallery < 13.1.0.6 - Missing Access Controls to Unauthenticated SQL injection / Email Address Disclosure
The Contest Gallery WordPress plugin before 13.1.0.6 does not have capability checks and does not sanitise or escape the cg-search-user-name-original parameter before using it in a SQL statement when exporting users from a gallery, which could allow unauthenticated to perform SQL injections attacks, as well as get the list of all users registered on the blog, including their username and email address
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-24915?
CVE-2021-24915 has a moderate severity rating due to its potential to allow SQL injection attacks.
How do I fix CVE-2021-24915?
To fix CVE-2021-24915, update the Contest Gallery WordPress plugin to version 13.1.0.6 or later.
Who is affected by CVE-2021-24915?
Any users running versions of the Contest Gallery WordPress plugin prior to 13.1.0.6 are affected by CVE-2021-24915.
What specific vulnerability does CVE-2021-24915 exploit?
CVE-2021-24915 exploits the lack of capability checks and improper sanitization of user inputs in SQL statements.
Is authentication required to exploit CVE-2021-24915?
No, CVE-2021-24915 can be exploited by unauthenticated users due to insufficient security controls.