Threats tagged 'ghsa-q8gv-w79g-jw6j'

The LogMyTrip WordPress plugin up to version 1.9 contains a SQL injection vulnerability due to improper sanitization and escaping of a cookie value used in SQL queries. This flaw allows unauthenticated attackers to inject SQL code via any page rendering the plugin's shortcodes. The vulnerability has a high severity score of 8.6 and impacts confidentiality but not integrity or availability.