Wordpress Country State City Dropdown CF7插件是一个功能强大、易于使用的WordPress插件,它为用户在联系表单中提供国家、州/省和城市的三级下拉菜单功能,帮助用户更准确地填写地区信息。 同时,插件的团队和支持也非常出色,为用户提供高质量的服务。 漏洞概述: 由于对用户提供的参数转义不足,且现有 SQL 查询准备不足...
The Country State City Dropdown CF7 plugin for WordPress is vulnerable to SQL Injection via the ‘cnt’ and 'sid' parameters in versions up to, and including, 2.7.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This...
php$states=edd_get_shop_states($address['country']);if(!empty($states)){echoEDD()->html->select(array('options'=> $states,'name'=>'edd-payment-address[0][state]','selected'=> $address['state'],'show_option_all'=>false,'show_option_none'=>false,'chosen'=>true,'placeholder'=> ...