Not rated
CVE-2021-24391 An editid GET parameter of the Cashtomer WordPress plugin through 1.0.0 is not properly sanitised, escaped or…
Description
An editid GET parameter of the Cashtomer WordPress plugin through 1.0.0 is not properly sanitised, escaped or validated before inserting to a SQL statement, leading to SQL injection.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Cashtomer | 1.0.0 | No fix stated |