Description
Multiple vulnerabilities exist in RecordPress 0.3.1, including SQL injection and cross-site scripting (XSS). Input parameters are not properly sanitized, allowing attackers to inject SQL commands and JavaScript code.
Impact
SQL injection allows attackers to extract, modify, or delete data from the database. XSS vulnerabilities allow session hijacking, credential theft, and defacement of the website.
Solution
Contact the vendor for a patched version or migrate to a maintained CMS.