Horizontal scrolling announcement <= 9.2 - Authenticated (subscriber+) Blind SQL Injection

Description

The plugin did not sanitise its sid shortcode parameter before using it in a SQL statement, allowing low privilege users (subscriber+) to perform Blind SQL Injection attack.