Vulnerabilities > CVE-2021-24629 - Unspecified vulnerability in Post Content Xmlrpc Project Post Content Xmlrpc 1.0
Attack vector
NETWORK Attack complexity
LOW Privileges required
HIGH Confidentiality impact
HIGH Integrity impact
HIGH Availability impact
HIGH Summary
The Post Content XMLRPC WordPress plugin through 1.0 does not sanitise or escape multiple GET/POST parameters before using them in SQL statements in the admin dashboard, leading to an authenticated SQL Injections
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 2 |