Description (CNA)
The WPcalc WordPress plugin through 2.1 does not sanitize user input into the 'did' parameter and uses it in a SQL statement, leading to an authenticated SQL Injection vulnerability.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Unknown / WPcalc – create any online calculators | affected 2.1 through 2.1 |
CWE
CWE-89
References
ADP enrichment
No English description supplied.