{ "schema_version": "1.4.0", "id": "GHSA-wgc2-x6j9-625v", "modified": "2022-05-24T19:13:05Z", "published": "2022-05-24T19:13:05Z", "aliases": [ "CVE-2021-24392" ], "details": "An id GET parameter of the WordPress Membership SwiftCloud.io WordPress plugin through 1.0 is not properly sanitised, escaped or validated before inserting to a SQL statement, leading to SQL injection.", "severity": [], "affected": [], "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-24392" }, { "type": "WEB", "url": "https://codevigilant.com/disclosure/2021/wp-plugin-club-management-software" }, { "type": "WEB", "url": "https://wpscan.com/vulnerability/68530e63-bba3-4a9a-ae83-516684aa5dc6" } ], "database_specific": { "cwe_ids": [ "CWE-89" ], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2021-09-06T11:15:00Z" } }