.. / CVE-2021-24731

• SQLi
• Nuclei
• Web

Exploit for Pie Register < 3.7.1.6 - SQL Injection (CVE-2021-24731)

Description:

The Registration Forms User profile, Content Restriction, Spam Protection, Payment Gateways, Invitation Codes WordPress plugin before 3.7.1.6 does not properly escape user data before using it in a SQL statement in the wp-json/pie/v1/login REST API endpoint, leading to an SQL injection.

Nuclei Template

View the template here CVE-2021-24731.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2021/CVE-2021-24731.yaml

References: