2 matches found
PT-2017-11014
Name of the Vulnerable Software and Affected Versions add-edit-delete-listing-for-member-module version 1.0 Description The issue arises from the plugin author's failure to sanitize user-supplied input via the $act variable before passing it into an SQL statement, potentially leading to SQL...
7.2CVSS0.01719EPSS
SaveExploits1References4
CVE-2017-1002025: Improper Neutralization of Special Elements used in an SQL Command
Vulnerability in wordpress plugin add-edit-delete-listing-for-member-module v1.0, The plugin author does not sanitize user supplied input via $act before passing it into an SQL statement...
7.2CVSS7.2AI score0.01719EPSS
SaveExploits1References2
20