Description
Rukovoditel 2.5.2 is affected by a SQL injection vulnerability because of improper handling of the filters[0][value] or filters[1][value] parameter.
Remediation
References
Related Vulnerabilities
WordPress Plugin WP Accurate Form Data Multiple Vulnerabilities (1.2)
WordPress Plugin myghpay WooCommerce Payment Gateway Cross-Site Scripting (3.0)
WordPress Plugin Appointments Scheduler Cross-Site Scripting (1.5)
PHP Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2007-1581)