SQL Injection Vulnerability Affects Unite Gallery Lite

CVE-2024-43207

Summary

The Valiano Unite Gallery Lite plugin is susceptible to an SQL Injection vulnerability, allowing attackers to manipulate SQL queries by injecting malicious code. This issue arises from improper handling of special elements in SQL commands. Successful exploitation can lead to unauthorized database access, enabling malicious actors to view, modify, or delete data. It is crucial for users of the plugin, especially those running versions up to 1.7.62, to implement security measures to mitigate potential threats.

References