title: Contact Form Submissions < 1.7.1 - Authenticated SQL Injection
description: Unvalidated input in the Contact Form Submissions WordPress plugin before 1.7.1, could lead to SQL injection in the wpcf7_contact_form GET parameter when submitting a filter request as a high privilege user (admin+)
problem types: CWE-89 SQL Injection
affected:
{
product: Contact Form Submissions
vendor: Unknown
versions:
lessThan: 1.7.1, status: affected, version: 1.7.1, versionType: custom
}