CVE-2021-32441

Published February 17th, 2023

View on NVD ↗

CVSS v3

7.5

HIGH

CVSS v2

N/A

Affected

PROJECTS

Description

SQL Injection vulnerability in Exponent-CMS v.2.6.0 fixed in 2.7.0 allows attackers to gain access to sensitive information via the selectValue function in the expConfig class.

pang0lin/CVEproject

CVE request

GitHub

exponentcms/exponent-cms

Content Management, Simple.

GitHub