ByteOS Network

CVE Vulnerability Details :

CVE-2021-25109

PUBLISHED

More Info Official Page

Assigner-WPScan

Assigner Org ID-1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81

Published At-14 Feb, 2022 | 09:20

Updated At-03 Aug, 2024 | 19:56

▼CVE Numbering Authority (CNA)

Futurio Extra < 1.6.3 - Authenticated SQL Injection

The Futurio Extra WordPress plugin before 1.6.3 is affected by a SQL Injection vulnerability that could be used by high privilege users to extract data from the database as well as used to perform Cross-Site Scripting (XSS) against logged in admins by making send open a malicious link.

Affected Products

Vendor

Unknown

Product

Futurio Extra

Versions

Affected

From 1.6.3 before 1.6.3 (custom)

Problem Types

Type	CWE ID	Description
CWE	CWE-89	CWE-89 SQL Injection

Credits

Jan w Oleju

References

Hyperlink	Resource
https://wpscan.com/vulnerability/36261af9-3b34-4563-af3c-c9e54ae2d581	x_refsource_MISC

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://wpscan.com/vulnerability/36261af9-3b34-4563-af3c-c9e54ae2d581	x_refsource_MISC x_transferred

Affected Products

Affected

Problem Types

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

Affected Products

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References