Read the docs

Logo Slider Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Logo Slider Project records in CISA KEV

No Logo Slider Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

1 record in Logo Slider · all components

TI-2022-01555 CVE-2022-1687 · GHSA-48vh-cf5c-h3m3

Logo Slider <= 1.4.8 - Admin+ SQLi

Priority LOW 15

The Logo Slider WordPress plugin through 1.4.8 does not sanitise and escape the lsp_slider_id parameter before using it in a SQL statement via the Manage Slider Images admin page, leading to an SQL Injection

CVSS 3.1LOW 2.7 Network High privileges No interaction EPSS 0.00808 Published 2022-06-06 No fix listed CWE-89
Open these records in search →