Woltlab WCF SQL Injection Vulnerability

Woltlab WCF, a forum software, is affected by an SQL Injection vulnerability.

Woltlab WCF versions 6.2.4 and earlier are vulnerable. An attacker can exploit this by manipulating user options in UserEditor.class.php and the update action in UserAction.class.php.