{"cvss":0.0,"datePublished":"2020-10-10T00:00:00Z","dateUpdated":"2020-10-10T00:00:00Z","description":"An unauthenticated SQL Injection vulnerability in Good Layers LMS Plugin <= 2.1.4 exists due to the usage of \"wp_ajax_nopriv\" call in WordPress, which allows any unauthenticated user to get access to the function \"gdlr_lms_cancel_booking\" where POST Parameter \"id\" was sent straight into SQL query without sanitization.","dueDate":"","id":"CVE-2020-27481","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"good_learning_management_system","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","severity":"HIGH","source":"vulncheck_kev","title":"goodlayers good_learning_management_system Improper Neutralization of Special Elements used in an SQL Command","vendor":"goodlayers"}