High severity · published Nov 8, 2021
CVE-2021-24575
The School Management System – WPSchoolPress WordPress plugin before 2.1.10 does not properly sanitize or use prepared statements before using POST variable in SQL queries,…
8.8
CVSS
1.4%
EPSS
No
On KEV
Description
The School Management System – WPSchoolPress WordPress plugin before 2.1.10 does not properly sanitize or use prepared statements before using POST variable in SQL queries, leading to SQL injection in multiple actions available to various authenticated users, from simple subscribers/students to teachers and above.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.4% · higher than 72% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WP
Wpschoolpress · Igexsolutions
before 2.1.10 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2021-24575
CVE.org
https://www.cve.org/CVERecord?id=CVE-2021-24575
Exploit
https://wpscan.com/vulnerability/83c9c3af-9eca-45e0-90d7-edc69e616e6a
More from Wpschoolpress
8.8
CVE-2024-9637
School Management System – WPSchoolPress <= 2.2.10 - Insecure Direct Object Reference to Authenticated (Teacher+) Account Takeover/Privilege Escalation
8.8
CVE-2023-4776
The School Management System WordPress plugin before 2.2.5 uses the WordPress esc_sql() function on a field not delimited by quotes and did not first prepare the query, leading to…
6.5
CVE-2025-1670
School Management System – WPSchoolPress <= 2.2.16 - Authenticated (Parent+) SQL Injection
6.5
CVE-2025-1669
School Management System – WPSchoolPress <= 2.2.17 - Authenticated (Teacher+) SQL Injection
6.5
CVE-2024-12332
School Management System – WPSchoolPress <= 2.2.14 - Authenticated (Student/Parent+) SQL Injection