CVE-2017-1002012

Critical

Published: 14/09/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Vulnerability in the WordPress plugin 'image-gallery-with-slideshow' version 1.5.2 is due to the lack of input sanitization from the gid variable before it is used in an SQL statement.

Risk Assessment

The lack of input sanitization may lead to SQL Injection attacks, jeopardizing database security and application integrity.

Recommendation

It is recommended to update the plugin to the latest version that fixes input sanitization or to implement appropriate code fixes.

Original NVD description (English source)

Vulnerability in wordpress plugin image-gallery-with-slideshow v1.5.2, In image-gallery-with-slideshow/admin_setting.php the following snippet of code does not sanitize input via the gid variable before passing it into an SQL statement.