CVE-2017-14507

Published: 2017-09-29T01:34Z

Last Modified: 2024-11-21T03:12Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

Multiple SQL injection vulnerabilities in the Content Timeline plugin 4.4.2 for WordPress allow remote attackers to execute arbitrary SQL commands via the (1) timeline parameter in content_timeline_class.php; or the id parameter to (2) pages/content_timeline_edit.php or (3) pages/content_timeline_index.php. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt