high7.5
CVE-2021-32441
SQL Injection vulnerability in Exponent-CMS v.2.6.0 fixed in 2.7.0 allows attackers to gain access to sensitive information via the selectValue function in the…
Impact
SQL Injection vulnerability in Exponent-CMS v.2.6.0 fixed in 2.7.0 allows attackers to gain access to sensitive information via the selectValue function in the expConfig class.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Exponentcms | Exponent Cms | from 2.6.0 before 2.7.0 |