Threats tagged 'ghsa-c697-h8w8-m356'

The Custom css-js-php WordPress plugin versions through 2.0.7 contain a vulnerability where user input is not properly sanitized before being used in a SQL query. The query result is then passed to eval(), enabling unauthenticated users to execute arbitrary PHP code on the server.