PT-2017-11007

Name of the Vulnerable Software and Affected Versions wordpress plugin eventr version 1.02.2 Description The issue concerns a lack of input sanitization in the edit.php form and attendees.php code, allowing for blind SQL injection via the event parameter. Recommendations For version 1.02.2, updat...

CVE-2017-1002018: Improper Neutralization of Special Elements used in an SQL Command

Vulnerability in wordpress plugin eventr v1.02.2, The edit.php form and attendees.php code do not sanitize input, this allows for blind SQL injection via the event parameter...