Security Advisory
CVE-2021-24360
6.5
MEDIUM
Vulnerability Description
The Yes/No Chart WordPress plugin before 1.0.12 did not sanitise its sid shortcode parameter before using it in a SQL statement, allowing medium privilege users (contributor+) to perform Blind SQL Injection attacks
Published Date
June 14, 2021
Official Source
NIST NVD Advisory