Read the docs

satollo

Records8All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

satollo records in CISA KEV

No satollo vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Giveaway 1 record LOW Head, Footer, And Post Injections 1 record LOW

Records

1 record in Giveaway · all components

TI-2021-06784 CVE-2021-24497 · GHSA-356m-64j5-84f5

Giveaway <= 1.2.2 - Authenticated SQL Injection

Priority LOW 34

The Giveaway WordPress plugin through 1.2.2 is vulnerable to an SQL Injection issue which allows an administrative user to execute arbitrary SQL commands via the $post_id on the options.php page.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01344 Published 2021-08-23 No fix listed CWE-89
Open these records in search →