high7.2
CVE-2021-24497
The Giveaway WordPress plugin through 1.2.2 is vulnerable to an SQL Injection issue which allows an administrative user to execute arbitrary SQL commands via t…
Impact
The Giveaway WordPress plugin through 1.2.2 is vulnerable to an SQL Injection issue which allows an administrative user to execute arbitrary SQL commands via the $post_id on the options.php page.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Satollo | Giveaway | through 1.2.2 |