Wallos before 1.15.3 is vulnerable to SQL Injection via the category and payment parameters to /subscriptions/get.php.

Published Apr 30, 2024 · Updated Aug 2, 2024 · Assigned by mitre