Support Ticket System < 1.2.1 - SQL Injection
criticalMultiple SQL injection vulnerabilities in includes/update.php in the Support Ticket System plugin before 1.2.1 for WordPress allow remote attackers to execute arbitrary SQL commands via the (1) user or (2) id parameter.
- CVSS:
- 9.8
- Affected:
- up to 1.2.1
- Fixed in:
- 1.2.1
- Disclosed:
- Oct 6, 2015