Description
SQL injection vulnerability in Music Store - WordPress eCommerce versions prior to 1.1.14 allows a remote authenticated attacker with an administrative privilege to execute arbitrary SQL commands. Information stored in the database may be obtained or altered by the attacker.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| CodePeople | Music Store - WordPress eCommerce | prior to 1.1.14 | — |