Axact Author List Widget, f2497798-90dd-4f93-b6ff-31e02f8ca6fc

CVE, Research URL: f2497798-90dd-4f93-b6ff-31e02f8ca6fc
Home page URL: Security reports for Axact Author List Widget
Application: Axact Author List Widget
Published on: -
Research Description: Axact Author List Widget [knr-author-list-widget] < 3.0.0 (closed) KNR Author List Widget < 3.0.0 - Unauthenticated SQL Injection The plugin does not sanitise and escape the listitem parameter before using it in a SQL statement in the knrAuthorListCustomSortSave.php file, leading to an unauthenticated SQL Injection
Affected versions: max 3.0.0.
Status: vulnerable