The Integration for Contact Form 7 and Zoho CRM, Bigin WordPress plugin before 1.2.4 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high pr…
CVSS 3.1MEDIUM 4.8·Network·High privileges·User interaction·EPSS 0.0044·Published 2023-06-19·Fixed in 1.2.4CWE-79