Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 10:21:24 +0000 CVE-2021-24848 — Mediamatic < 2.8.1 - Subscriber+ SQL Injection https://cve.radiocsirt.org/vuln/cve-2021-24848 <p><strong>Affected:</strong> Unknown Mediamatic – Media Library Folders</p> <p>The mediamaticAjaxRenameCategory AJAX action of the Mediamatic WordPress plugin before 2.8.1, available to any authenticated user, does not sanitise the categoryID parameter before using it in a SQL statement, leading to an SQL injection</p> <p><strong>Affected:</strong> Unknown Mediamatic – Media Library Folders</p> <p>The mediamaticAjaxRenameCategory AJAX action of the Mediamatic WordPress plugin before 2.8.1, available to any authenticated user, does not sanitise the categoryID parameter before using it in a SQL statement, leading to an SQL injection</p> https://cve.radiocsirt.org/vuln/cve-2021-24848