NetSight
high8.8

CVE-2020-25379

Wordpress Plugin Store / Mike Rooijackers Recall Products V0.8 fails to sanitize input from the 'Manufacturer[]' parameter which allows an authenticated attack…

Impact

Wordpress Plugin Store / Mike Rooijackers Recall Products V0.8 fails to sanitize input from the 'Manufacturer[]' parameter which allows an authenticated attacker to inject a malicious SQL query.

Affected products

VendorProductAffected versions
Recall-Products ProjectRecall-Products
Version 0.8

Weakness classification

References