title: Easy Social Icons < 3.1.4 - Admin+ SQL Injection
description: The Easy Social Icons WordPress plugin before 3.1.4 does not sanitize the selected_icons attribute to the cnss_widget before using it in an SQL statement, leading to a SQL injection vulnerability.
problem types: CWE-89 SQL Injection
affected:
{
product: Easy Social Icons
vendor: Unknown
versions:
lessThan: 3.1.4, status: affected, version: 3.1.4, versionType: custom
}