Threats tagged 'ghsa-wg28-ff28-rvw7'

The Geo Mashup plugin for WordPress versions up to and including 1.13.18 is vulnerable to a time-based SQL injection via the 'object_ids' and 'exclude_object_ids' parameters. This vulnerability arises from insufficient escaping of user-supplied input and improper handling of SQL queries, allowing unauthenticated attackers to inject additional SQL commands. The esc_sql() function is ineffective in this context because it does not protect against injection in unquoted SQL IN(...) clauses. The numeric-only sanitizer is only applied in AJAX code paths, leaving other paths vulnerable. Exploitation can lead to extraction of sensitive database information through a time-based blind SQL injection technique.