title: Blog2Social: Social Media Auto Post & Scheduler < 6.3.1 - Authenticated SQL Injection
description: Unvalidated input in the Blog2Social WordPress plugin, versions before 6.3.1, lead to SQL Injection in the Re-Share Posts feature, allowing authenticated users to inject arbitrary SQL commands.
problem types: CWE-89 SQL Injection
affected:
{
product: Blog2Social: Social Media Auto Post & Scheduler
vendor: Unknown
versions:
lessThan: 6.3.1, status: affected, version: 6.3.1, versionType: custom
}