Description
The SupportCandy WordPress plugin before 3.1.7 does not properly sanitise and escape the agents[] parameter in the set_add_agent_leaves AJAX function before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admin.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | SupportCandy | < 3.1.7 | 3.1.7 |
References
- https://wpscan.com/vulnerability/bdb75c8c-87e2-4358-ad3b-f4236e9a43c0 exploit vdb-entry technical-description