RSVP ME Vulnerable to SQL Injection

CVE-2024-50544

What is CVE-2024-50544?

An SQL Injection vulnerability has been identified in RSVP ME, a plugin developed by Micah Blu. This vulnerability occurs due to improper neutralization of special elements utilized in SQL commands, potentially allowing attackers to manipulate queries executed by the application. The affected versions range from n/a through 1.9.9, and exploitation could lead to unauthorized data access or manipulation, making it critical for users to address this issue promptly.

References