description: Vulnerability in Easy2map-photos WordPress Plugin v1.09 allows SQL Injection via unsanitized mapTemplateName, mapName, mapSettingsXML, parentCSSXML, photoCSSXML, mapCSSXML, mapHTML,mapID variables
problem types: SQL Injection in easy2map-photos wordpress plugin v1.09
affected:
{
product: Easy2map-photos WordPress Plugin
vendor: Steven Ellis
versions:
status: affected, version: 1.09
}