title: FlightLog <= 3.0.2 - Authenticated (editor+) SQL Injection
description: The FlightLog WordPress plugin through 3.0.2 does not sanitise, validate or escape various POST parameters before using them a SQL statement, leading to SQL injections exploitable by editor and administrator users
problem types: CWE-89 SQL Injection
affected:
{
product: FlightLog
vendor: Unknown
versions:
lessThanOrEqual: 3.0.2, status: affected, version: 3.0.2, versionType: custom
}