Pligg CMS 2.0.2 contains a time-based SQL injection vulnerability via the $recordIDValue parameter in the admin_update_module_widgets.php file.
No PoCs from references.
- https://github.com/p1ay8y3ar/cve_monitor