sql injection

Author

Posts
November 22, 2021 at 11:19 pm #109435

recycled_software
Participant

Hi

I’m running an automated pentest on a clone of our development site and the scan has so far found a couple of SQL injection vulnerabilities for the parameter wmc-currency

If the SQL in your plugin uses prepared statements then we can rest assured these are false positives. Please can you confirm your SQL uses prepared statements?
Author

Posts

You must be logged in to see replies to this topic. Click here to login or register

We use cookies to personalise content and ads, to provide social media features and to analyse our traffic. We also share information about your use of our site with our social media, advertising and analytics partners. View more