Description
The Iptanus File Upload WordPress plugin before 5.1.8 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to an SQL injection exploitable by unauthenticated users.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Iptanus File Upload | < 5.1.8 | 5.1.8 |
References
- https://wpscan.com/vulnerability/364c99a4-4ce9-4e5f-bccc-2b4081e4031d/ exploit vdb-entry technical-description