Exploit for SQL Injection in Techspawn Wp-Email-Users

CVE-2021-24959 Description --- The WP Email Users WordPress...

CVE-2021-24959: Improper Neutralization of Special Elements used in an SQL Command

The WP Email Users WordPress plugin through 1.7.6 does not escape the dataraw parameter in the weuselectedusers1 AJAX action, available to any authenticated users, allowing them to perform SQL injection attacks...