CVE-2021-24772

HIGH · CVSS 8.8 EPSS 1.50%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2021-11-17 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2021-24772

Severity

HIGH

CVSS

8.8

EPSS

1.50%

WordPress

Original NVD Description

The Stream WordPress plugin before 3.8.2 does not sanitise and validate the order GET parameter from the Stream Records admin dashboard before using it in a SQL statement, leading to an SQL injection issue.