CP Image Store with Slideshow vulnerabilities
We track 1 vulnerability in CP Image Store with Slideshow products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on June 8, 2022.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest CP Image Store with Slideshow vulnerabilities
- 9.8 Critical severity
CP Image Store with Slideshow: Improper Neutralization of Special Elements used in an SQL Command
The CP Image Store with Slideshow WordPress plugin before 1.0.68 does not sanitise and escape the ordering_by query parameter before using it in a SQL statement in pages where the [codepeople-image-store] is embed, allowing unauthenticated users to perform an