title: Asgaros Forum < 1.15.15 - Admin+ SQL Injection via forum_id
description: The Asgaros Forum WordPress plugin before 1.15.15 does not validate or escape the forum_id parameter before using it in a SQL statement when editing a forum, leading to an SQL injection issue
problem types: CWE-89 SQL Injection
affected:
{
product: Asgaros Forum
vendor: Unknown
versions:
lessThan: 1.15.15, status: affected, version: 1.15.15, versionType: custom
}