CVE-2024-8621

CVE-2024-8621 affects the WordPress plugin Daily Prayer Time for mosques. The vulnerability is an SQL Injection via the max_word parameter in the quran_verse shortcode, caused by insufficient escaping and improper query preparation. Exploitation requires authenticated access at Contributor level ...