CVE-2017-15977

Protected Links – Expiring Download Links 1.0 allows SQL Injection via the username parameter.

Source: CVE-2017-15977