Description (CNA)
The Rich Reviews by Starfish WordPress plugin before 1.9.6 does not properly validate the orderby GET parameter of the pending reviews page before using it in a SQL statement, leading to an authenticated SQL injection issue
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Unknown / Rich Reviews by Starfish | affected 1.9.6 before 1.9.6 |
CWE
CWE-89
References
- https://wpscan.com/vulnerability/be7b102f-3982-46bd-a79c-203498f7c820
- https://plugins.trac.wordpress.org/changeset/2624882/
ADP enrichment
No English description supplied.