CVE-2024-37225 – WordPress Zoho Marketing Automation plugin <= 1.2.7 - SQL Injection vulnerability

https://notcve.org/view.php?id=CVE-2024-37225

21 Jun 2024 — Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Zoho Marketing Automation.This issue affects Zoho Marketing Automation: from n/a through 1.2.7. Neutralización incorrecta de elementos especiales utilizados en una vulnerabilidad de comando SQL ("inyección SQL") en Zoho Marketing Automation. Este problema afecta a Zoho Marketing Automation: desde n/a hasta 1.2.7. The Zoho Marketing Automation plugin for WordPress is vulnerable to SQL Injection in versions u... • https://patchstack.com/database/vulnerability/zoho-marketinghub/wordpress-zoho-marketing-automation-plugin-1-2-7-sql-injection-vulnerability?_s_id=cve • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •