Description (CNA)
A proid GET parameter of the WordPress支付宝Alipay|财付通Tenpay|贝宝PayPal集成插件 WordPress plugin through 3.7.2 is not sanitised, properly escaped or validated before inserting to a SQL statement not delimited by quotes, leading to SQL injection.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Unknown / WordPress支付宝Alipay|财付通Tenpay|贝宝PayPal集成插件 | affected 3.7.2 through 3.7.2 |
CWE
CWE-89
References
- https://wpscan.com/vulnerability/92b0abec-082f-4545-9636-1b2f4dac66fe
- https://codevigilant.com/disclosure/2021/wp-plugin-alipay/
ADP enrichment
No English description supplied.