CVE-2021-47941

HighPublic PoC

Published: 10 May 2026

Published

10 May 2026

Modified

10 May 2026

KEV Added

—

Patch

—

CVSS Score 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

EPSS Score N/A

Risk Priority 16 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2021-47941 is a high-severity SQL Injection (CWE-89) vulnerability in Pantherius (inferred from references). Its CVSS base score is 8.2 (High).

Operationally, it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.

Threat & Defense Details

Likely Mitigating ControlsAI

Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.

CA-8 Penetration Testing

addresses: CWE-89

Penetration testing uses SQL injection payloads against database interfaces, identifying and supporting fixes for SQL injection weaknesses.

SI-10 Information Input Validation

addresses: CWE-89

Validates query inputs to prevent SQL syntax or command manipulation.

NVD Description

WordPress Plugin Survey & Poll 1.5.7.3 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the wp_sap cookie parameter. Attackers can craft SQL payloads in the cookie to extract sensitive…

database information including usernames, passwords, and other confidential data from the WordPress database.

Deeper analysisAI

Automated synthesis unavailable for this CVE.