The Blog2Social: Social Media Auto Post & Scheduler WordPress plugin prior to 6.9.10 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by any authenticated users, such as subscribers
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
adenion blog2social |
Vulmon