title: GSEOR <= 1.3 - Authenticated SQL Injection
description: A pageid GET parameter of the GSEOR – WordPress SEO Plugin WordPress plugin through 1.3 is not sanitised, escaped or validated before inserting to a SQL statement, leading to SQL injection.
problem types: CWE-89 SQL Injection
affected:
{
product: GSEOR – WordPress SEO Plugin
vendor: Unknown
versions:
lessThanOrEqual: 1.3, status: affected, version: 1.3, versionType: custom
}