Skip to content
OpenAdvisories

Product · contrid

Slideshow Gallery LITE

2 known vulnerabilities.

1 result · Clear filters · Feed

  • High 8.1

    Slideshow Gallery LITE <= 1.8.1 - Authenticated (Contributor+) SQL Injection

    The Slideshow Gallery LITE plugin for WordPress is vulnerable to time-based SQL Injection via the id parameter in all versions up to, and including, 1.8.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the ex…