CVE-2017-1002023

The CVE affects the WordPress plugin Easy Team Manager v1.3.2. Root cause: the code in ./easy-team-manager/inc/easy_team_manager_desc_edit.php fails to sanitize the id before using it in an SQL statement, enabling SQL injection. Reports describe it as an authenticated blind SQL injection vulnerab...