title: BSK PDF Manager < 3.1.2 - Admin+ SQL Injection
description: The BSK PDF Manager WordPress plugin before 3.1.2 does not validate and escape the orderby and order parameters before using them in a SQL statement, leading to a SQL injection issue
problem types: CWE-89 SQL Injection
affected:
{
product: BSK PDF Manager
vendor: Unknown
versions:
lessThan: 3.1.2, status: affected, version: 3.1.2, versionType: custom
}