Description (CNA)
The myCred WordPress plugin before 2.3 does not validate or escape the fields parameter before using it in a SQL statement, leading to an SQL injection exploitable by any authenticated user
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Unknown / myCred – Points, Rewards, Gamification, Ranks, Badges & Loyalty Plugin | affected 2.3 before 2.3 |
CWE
CWE-89
References
ADP enrichment
No English description supplied.