Vulnerabilities > CVE-2021-24497 - Unspecified vulnerability in Satollo Giveaway
Attack vector
NETWORK Attack complexity
LOW Privileges required
HIGH Confidentiality impact
HIGH Integrity impact
HIGH Availability impact
HIGH Summary
The Giveaway WordPress plugin through 1.2.2 is vulnerable to an SQL Injection issue which allows an administrative user to execute arbitrary SQL commands via the $post_id on the options.php page.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 7 |