CVE-2018-25076

Summary (CVE-2018-25076) A SQL injection exists in the BigTree CMS “Events Extension” via functions in classes/events.php: getRandomFeaturedEventByDate, getUpcomingFeaturedEventsInCategoriesWithSubcategories, recacheEvent, and searchResults. Root cause: unparameterized inputs in these paths enabl...