← Back to CVE List
CVE-2021-24143
Unvalidated input in the AccessPress Social Icons plugin, versions before 1.8.1, did not sanitise its widget attribute, allowing accounts with post permission, such as author, to perform SQL injections.
> MITRE Terms of Use apply – see LICENSE‑MITRE.txt