CVE-2021-24860 — BSK PDF Manager < 3.1.2 - Admin+ SQL Injection
The BSK PDF Manager WordPress plugin before 3.1.2 does not validate and escape the orderby and order parameters before using them in a SQL statement, leading to a SQL injection …
Published: 2021-11-29 · CVSS: Unscored
The BSK PDF Manager WordPress plugin before 3.1.2 does not validate and escape the orderby and order parameters before using them in a SQL statement, leading to a SQL injection issue
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7