Description (CNA)
The Wow Countdowns WordPress plugin through 3.1.2 does not sanitize user input into the 'did' parameter and uses it in a SQL statement, leading to an authenticated SQL Injection.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Unknown / Wow Countdowns – easily create any countdowns, counters and timers | affected 3.1.2 through 3.1.2 |
CWE
CWE-89
References
ADP enrichment
No English description supplied.