SQL Injection Vulnerability Affects Slideshow Gallery
CVE-2024-31355

8.5HIGH

Key Information:

Vendor
WordPress
Status
Slideshow Gallery
Vendor
CVE Published:
10 April 2024

Summary

An SQL Injection vulnerability exists in the Tribulant Slideshow Gallery plugin, allowing attackers to execute arbitrary SQL commands by manipulating input fields. This issue affects all versions up to and including 1.7.8. By exploiting this vulnerability, attackers could access sensitive database information, modify data, or escalate privileges within the application. Proper input sanitization and validation measures are essential to mitigate such vulnerabilities.

Affected Version(s)

Slideshow Gallery <= 1.7.8

References

https://patchstack.com/database/vulnerability/slideshow-g...
vdb-entry

CVSS V3.1

Score:
8.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

LVT-tholv2k (Patchstack Alliance)
.