Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2021-24921 1 Sigmaplugin 1 Advanced Database Cleaner 2024-11-21 6.1 Medium
The Advanced Database Cleaner WordPress plugin before 3.0.4 does not sanitise and escape $_GET keys and values before outputting them back in attributes, leading to Reflected Cross-Site Scripting issues
CVE-2021-24141 1 Sigmaplugin 1 Advanced Database Cleaner 2024-11-21 7.2 High
Unvaludated input in the Advanced Database Cleaner plugin, versions before 3.0.2, lead to SQL injection allowing high privilege users (admin+) to perform SQL attacks.