Seriously Simple Stats < 1.5.1 - Podcast Manager+ SQLi

2023-11-1500:00:00

wpscan.com

plugin

sql injection

sql statement

podcast manager

7.8 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

33.1%

JSON

Description The plugin does not properly sanitise and escape the order_by parameter before using it in a SQL statement, leading to a SQL injection exploitable by podcast manager roles and above

CPENameOperatorVersion
eq1.5.1

CPE	Name	Operator	Version
		eq	1.5.1