CVE-2017-1002012
CriticalSummary
Vulnerability in the WordPress plugin 'image-gallery-with-slideshow' version 1.5.2 is due to the lack of input sanitization from the gid variable before it is used in an SQL statement.
Risk Assessment
The lack of input sanitization may lead to SQL Injection attacks, jeopardizing database security and application integrity.
Recommendation
It is recommended to update the plugin to the latest version that fixes input sanitization or to implement appropriate code fixes.
Other vulnerabilities in WordPress plugin image-gallery-with-slideshow v1.5.2
See all- CVE-2017-1002015Critical
Vulnerability in the WordPress plugin 'image-gallery-with-slideshow' version 1.5.2, involving blind SQL injection in image-gallery-with-slideshow/admin_setting.php via the selectMulGallery parameter.
- CVE-2017-1002014Critical
Vulnerability in the WordPress plugin 'image-gallery-with-slideshow' version 1.5.2, involving blind SQL injection in admin_setting.php via the gallery_name parameter.
- CVE-2017-1002013Critical
The WordPress plugin 'image-gallery-with-slideshow' version 1.5.2 has a vulnerability to blind SQL Injection via the imgid parameter in image-gallery-with-slideshow/admin_setting.php.
Original NVD description (English source)
Vulnerability in wordpress plugin image-gallery-with-slideshow v1.5.2, In image-gallery-with-slideshow/admin_setting.php the following snippet of code does not sanitize input via the gid variable before passing it into an SQL statement.