CVE-2022-1687

Published: 2022-06-08T10:15Z

Last Modified: 2024-11-21T06:41Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

The Logo Slider WordPress plugin through 1.4.8 does not sanitise and escape the lsp_slider_id parameter before using it in a SQL statement via the Manage Slider Images admin page, leading to an SQL Injection > MITRE Terms of Use apply – see LICENSE‑MITRE.txt