Grocery Crud CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH Grocery Crud CVE published 2026-01-15

CVE-2021-47811

CVE-2021-47811 is a SQL injection vulnerability in Grocery Crud 1.6.4 that allows remote attackers to manipulate database queries through the order_by parameter in POST requests to the ajax_list endpoint. This vulnerability can potentially allow attackers to extract or modify database information. Defenders and administrators of Grocery Crud 1.6.4 systems should assess exposure and potential impact, and i [truncated]