cve/2015/CVE-2015-9465.md

CVE-2015-9465

Description

The yet-another-stars-rating plugin before 0.9.1 for WordPress has yasr_get_multi_set_values_and_field SQL injection via the set_id parameter.

POC

Reference

• https://wpvulndb.com/vulnerabilities/8309

Github

• https://github.com/20142995/nuclei-templates
• https://github.com/ARPSyndicate/cvemon