CVE-2021-24554
HIGH NUCLEIFreelancetoindia Paytm-pay < 1.3.2 - SQL Injection
Title source: ruleDescription
The Paytm – Donation Plugin WordPress plugin through 1.3.2 does not sanitise, validate or escape the id GET parameter before using it in a SQL statement when deleting donations, leading to an authenticated SQL injection issue
Nuclei Templates (1)
WordPress Paytm Donation <=1.3.2 - Authenticated SQL Injection
HIGHVERIFIEDby theamanrawat
Scores
CVSS v3
7.2
EPSS
0.2104
EPSS Percentile
95.7%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-89
Status
published
Products (1)
freelancetoindia/paytm-pay
< 1.3.2
Published
Aug 23, 2021
Tracked Since
Feb 18, 2026