Input validation vulnerability in Gestion de tarifs 1.4

The Gestion de tarifs plugin for WordPress is at risk of being hacked through the use of certain codes called ‘tarif’ and ‘intitule’. This vulnerability exists in all versions up to and including 1.4 because the plugin does not properly protect against dangerous user input and does not properly prepare its database queries. This could allow someone who is logged in with Contributor-level access or higher to add their own malicious code to existing queries, potentially giving them access to private information from the database.