Grocery Crud
1 CVEs
product
Monthly
Grocery Crud 1.6.4 has a SQL injection vulnerability in the order_by parameter, allowing remote attackers to read, modify, or delete database contents through crafted sort requests.
SQLi
Grocery Crud
NVD
Exploit-DB
CVSS 3.1
9.1
EPSS
0.0%
CVE-2021-47811
EPSS 0%
CVSS 9.1
CRITICAL
POC
Act Now
Grocery Crud 1.6.4 has a SQL injection vulnerability in the order_by parameter, allowing remote attackers to read, modify, or delete database contents through crafted sort requests.
SQLi
Grocery Crud
NVD
Exploit-DB