CVE-2021-32441: SQL Injection vulnerability in Exponent-CMS v.2.6.0 fixed in 2.7.0 allows attackers to gain access to sensitive information via the selectValue function in the…

PriorityP342high7.5CVSS 3.1

AVNACLPRNUINSUCHINAN

EPSS

0.60%

44.0th percentile

SQL Injection vulnerability in Exponent-CMS v.2.6.0 fixed in 2.7.0 allows attackers to gain access to sensitive information via the selectValue function in the expConfig class.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
exponentcms	exponent_cms	>= 2.6.0 < 2.7.0	2.7.0

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.