PT-2015-6407

Name of the Vulnerable Software and Affected Versions GigPress plugin versions prior to 2.3.9 Description The issue allows remote authenticated users to execute arbitrary SQL commands via the show artist id or show venue id parameter in an add action in the gigpress.php page to wp-admin/admin.php...