Unscored CVE-2014-5183 EUVD-2014-5081GHSA-573v-6g2j-5865

SQL injection vulnerability in includes/mode-edit.php in the Simple Retail Menus (simple-retail-menus) plugin before 4.1 for WordPress allo…

Published Aug 6, 2014 · Updated Sep 17, 2024 · Assigned by mitre

Description

SQL injection vulnerability in includes/mode-edit.php in the Simple Retail Menus (simple-retail-menus) plugin before 4.1 for WordPress allows remote authenticated editors to execute arbitrary SQL commands via the targetmenu parameter in an edit action to wp-admin/admin.php.

References

http://codevigilant.com/disclosure/wp-plugin-simple-retail-menus-a1-injection
https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=861170%40simple-retail-menus&old=728969%40simple-retail-menus&sfp_email=&sfph_mail=#file1