Xtreme Locator Dealer Locator Plugin <= 3.0.1 - Authenticated (Admin+) SQL Injection
highThe xtremelocator plugin 3.0.1 for WordPress has SQL injection via the id parameter for high-privilege (admin+) users.
- CVSS:
- 7.2
- Affected:
- up to 3.0.1
- Fix:
- No patched version reported
- Disclosed:
- Dec 16, 2016