CVE-2021-24551

The Edit Comments WordPress plugin through 0.3 does not sanitise, validate or escape the jaleditcomments GET parameter before using it in a SQL statement, leading to a SQL injection issue...

PT-2021-16071

Name of the Vulnerable Software and Affected Versions Edit Comments WordPress plugin versions 0.3 and earlier Description The issue arises from the lack of sanitization, validation, or escaping of the jal edit comments GET parameter before its use in a SQL statement, leading to a SQL injection...