RSS   Vulnerabilities for 'Popup box'   RSS

2021-08-02
 
CVE-2021-24458

CWE-89
 

 
The get_ays_popupboxes() and get_popup_categories() functions of the Popup box WordPress plugin before 2.3.4 did not use whitelist or validate the orderby parameter before using it in SQL statements passed to the get_results() DB calls, leading to SQL injection issues in the admin dashboard

 
 
CVE-2021-24460

CWE-89
 

 
The get_fb_likeboxes() function in the Popup Like box ??�??�?? Page Plugin WordPress plugin before 3.5.3 did not use whitelist or validate the orderby parameter before using it in SQL statements passed to the get_results() DB calls, leading to SQL injection issues in the admin dashboard

 

 >>> Vendor: Ays-pro 11 Products
Quiz maker
Portfolio responsive gallery
Image slider
Popup box
Survey maker
Secure copy content protection and content locking
Poll maker
Photo gallery
Faq builder
Popup like box
Personal dictionary


Copyright 2024, cxsecurity.com

 

Back to Top