critical9.8
CVE-2021-24827
The Asgaros Forum WordPress plugin before 1.15.13 does not validate and escape user input when subscribing to a topic before using it in a SQL statement, leadi…
Impact
The Asgaros Forum WordPress plugin before 1.15.13 does not validate and escape user input when subscribing to a topic before using it in a SQL statement, leading to an unauthenticated SQL injection issue
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Asgaros | Asgaros Forum | before 1.15.13 |