CVE-2021-24341 — Xllentech English Islamic Calendar < 2.6.8 - Authenticated SQL Injection
When deleting a date in the Xllentech English Islamic Calendar WordPress plugin before 2.6.8, the year_number and month_number POST parameters are not sanitised, escaped or vali…
Published: 2021-06-14 · CVSS: Unscored
When deleting a date in the Xllentech English Islamic Calendar WordPress plugin before 2.6.8, the year_number and month_number POST parameters are not sanitised, escaped or validated before being used in a SQL statement, leading to SQL injection.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7