title: Comment Highlighter <= 0.13 - Authenticated SQL Injection
description: A c GET parameter of the Comment Highlighter WordPress plugin through 0.13 is not properly sanitised, escaped or validated before inserting to a SQL statement, leading to SQL injection.
problem types: CWE-89 SQL Injection
affected:
{
product: Comment Highlighter
vendor: Unknown
versions:
lessThanOrEqual: 0.13, status: affected, version: 0.13, versionType: custom
}