high7.2
CVE-2021-24554
The Paytm – Donation Plugin WordPress plugin through 1.3.2 does not sanitise, validate or escape the id GET parameter before using it in a SQL statement when d…
Impact
The Paytm – Donation Plugin WordPress plugin through 1.3.2 does not sanitise, validate or escape the id GET parameter before using it in a SQL statement when deleting donations, leading to an authenticated SQL injection issue
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Freelancetoindia | Paytm-Pay | through 1.3.2 |