Description
lib\modules\contributors\contributor_list_table.php in the Podlove Podcast Publisher plugin 2.5.3 and earlier for WordPress has SQL injection in the orderby parameter to wp-admin/admin.php, exploitable through CSRF.
Unscored
CVE-2017-12949
EUVD-2017-4473GHSA-wcc8-4f85-h634
lib\modules\contributors\contributor_list_table.php in the Podlove Podcast Publisher plugin 2.5.3 and earlier for WordPress has SQL injecti…
Published Aug 18, 2017 · Updated Sep 17, 2024 · Assigned by mitre