Description
The WpCues Basic Quiz WordPress plugin through 1.6.5 does not properly sanitise and escape values before using them in a SQL statement, which allows unauthenticated attackers to perform SQL injection attacks and read data from the database.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | WpCues Basic Quiz | ≤ 1.6.5 | — |
References
- https://wpscan.com/vulnerability/c5c57e38-61e9-456b-a56e-ef25146ee28f/ exploit vdb-entry technical-description