Ultimate Maps by Supsystic, 83d02d55e621b64b2ba6bfa94a1543a55d5b7a0f

CVE, Research URL: 83d02d55e621b64b2ba6bfa94a1543a55d5b7a0f
Home page URL: Security reports for Ultimate Maps by Supsystic
Application: Ultimate Maps by Supsystic
Published on: Feb 08, 2021
Research Description: Ultimate Maps by Supsystic [ultimate-maps-by-supsystic] < 1.1.17 Ultimate Maps by Supsystic <= 1.1.16 - Authenticated SQL Injection The Ultimate Maps by Supsystic plugin for WordPress is vulnerable to SQL Injection in versions up to, and including, 1.1.16 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated-level attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
Affected versions: max 1.1.17.
Status: vulnerable