CVE-2017-6570

CVE-2017-6570 : Concrete details show a SQL injection in the WordPress plugin Mail Masta (aka mail-masta) version 1.0. The vulnerable component is the file ./inc/campaign/view-campaign-list.php, exploitable via the GET parameter id. Public records indicate an attacker with WordPress admin access ...