CVE-2014-3961

The CVE-2014-3961 issue affects the WordPress Participants Database plugin prior to 1.5.4.9, where an SQL injection is possible via the query parameter in the export CSV action (pdb-signup/). The root cause is improper sanitization of user input in the export CSV workflow, enabling remote attacke...