The Speed Booster Pack âš¡ PageSpeed Optimization Suite WordPress plugin before 4.3.3.1 does not escape the sbp_convert_table_name parameter before using it in a SQL statement to convert the related table, leading to an SQL injection
CPE | Name | Operator | Version |
---|---|---|---|
speed_booster_pack | lt | 4.3.3.1 |