| |
Vulnerability CVE-2021-24957
Published: 2022-04-25
| Description: |
The Advanced Page Visit Counter WordPress plugin through 5.0.8 does not escape the artID parameter before using it in a SQL statement in the apvc_reset_count_art AJAX action, available to any authenticated user, leading to a SQL injection |
Type:
CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection'))
References: |
https://wpscan.com/vulnerability/a282606f-6abf-4f75-99c9-dab0bea8cc96
|
|
|
Copyright 2026, cxsecurity.com
|
|
|
